&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1649.217785] FAULT_INJECTION: forcing a failure. [ 1649.217785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.220755] CPU: 1 PID: 9465 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 1649.222189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1649.223911] Call Trace: [ 1649.224485] dump_stack+0x107/0x167 [ 1649.225245] should_fail.cold+0x5/0xa [ 1649.226048] _copy_from_user+0x2e/0x1b0 [ 1649.226883] iovec_from_user+0x141/0x400 [ 1649.227739] __import_iovec+0x67/0x590 [ 1649.228584] io_import_iovec+0x581/0x1120 [ 1649.229458] ? io_complete_rw+0x230/0x230 [ 1649.230341] ? kiocb_done+0x16b/0xc90 [ 1649.231149] io_read+0xe14/0x11e0 [ 1649.231874] ? ext4_release_file+0x380/0x380 [ 1649.232814] ? kiocb_done+0xc90/0xc90 [ 1649.233611] ? mark_lock+0xf5/0x2df0 [ 1649.234397] ? lock_chain_count+0x20/0x20 [ 1649.235277] ? stack_trace_consume_entry+0x160/0x160 [ 1649.236355] ? lock_acquire+0x197/0x470 [ 1649.237192] ? __lock_acquire+0xbb1/0x5b00 [ 1649.238080] io_issue_sqe+0x2e8a/0x77b0 [ 1649.238931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1649.240026] ? SOFTIRQ_verbose+0x10/0x10 [ 1649.240882] ? lock_chain_count+0x20/0x20 [ 1649.241753] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1649.242844] ? io_connect+0x610/0x610 [ 1649.243644] ? lock_acquire+0x197/0x470 [ 1649.244480] ? find_held_lock+0x2c/0x110 [ 1649.245330] ? __fget_files+0x2cf/0x520 [ 1649.246166] ? lock_downgrade+0x6d0/0x6d0 [ 1649.247039] __io_queue_sqe+0x90/0x9d0 [ 1649.247871] ? io_issue_sqe+0x77b0/0x77b0 [ 1649.248747] ? __fget_files+0x2f8/0x520 [ 1649.249592] ? io_prep_rw+0x7f5/0x1050 [ 1649.250410] io_submit_sqes+0x44aa/0x8610 [ 1649.251308] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1649.252355] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1649.253363] ? find_held_lock+0x2c/0x110 [ 1649.254035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9476 comm=syz-executor.1 [ 1649.254214] ? io_submit_sqes+0x8610/0x8610 [ 1649.256578] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1649.257589] ? wait_for_completion_io+0x270/0x270 [ 1649.258599] ? rcu_read_lock_any_held+0x75/0xa0 [ 1649.259574] ? vfs_write+0x354/0xb10 [ 1649.260360] ? fput_many+0x2f/0x1a0 [ 1649.261121] ? ksys_write+0x1a9/0x260 [ 1649.261926] ? __ia32_sys_read+0xb0/0xb0 [ 1649.262779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1649.263878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1649.264965] do_syscall_64+0x33/0x40 [ 1649.265751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1649.266823] RIP: 0033:0x7f58d42d3b19 [ 1649.267608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.271463] RSP: 002b:00007f58d1849188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1649.273063] RAX: ffffffffffffffda RBX: 00007f58d43e6f60 RCX: 00007f58d42d3b19 [ 1649.274546] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1649.276031] RBP: 00007f58d18491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.277565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1649.279093] R13: 00007ffd9bd08c0f R14: 00007f58d1849300 R15: 0000000000022000 22:22:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x110, r0, 0x0) fork() 22:22:49 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:22:49 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b49, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:22:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:22:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x2, 0xfffff801, 0x0, @mcast1, @remote, 0x1, 0x20, 0x8, 0x2}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x86}, 0x4000001) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x81001, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) 22:22:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1649.298683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9477 comm=syz-executor.1 22:22:49 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:22:49 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:22:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b72c6d732bd24dabf0713124b9a9ced4714e27697a653d755730303030ff0f303030303030303030302c"]) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) openat(r2, &(0x7f00000002c0)='./file1\x00', 0x100, 0x18) fallocate(r1, 0x0, 0x0, 0x8800000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000280)={0x0, 0xd127}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x7f, 0x8, 0x1000, 0x6, @mcast1, @loopback, 0x1, 0x700, 0x9, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="03de57a7206002b0b129632dc59f6d94000328bd7000fd80dd9208000800a49086ce06d29becaf8f8cb8ae627a41793528fa0306fcaafe452e59383df221fab5148dbc72c782f1030bcaa9d5649eae904f7e5c5b1887174a4f2c06f4e8f85f8075d77b7c16b491e208b5af8ff3094333d65d27a6b0e291503bbdca539fb4f1e4fa2c918833d9c467f738", @ANYRES32=r4, @ANYBLOB="060001000200000014000400fc010000000000000000000000000000080003000600000008000200030000002000018014000400ff020000000000000000000000000001060005004e230000080002000500000008000300070000000c0001800800060002000000"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 22:22:49 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, 0x0) 22:22:49 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1649.415465] 9pnet: Insufficient options for proto=fd 22:22:49 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5411, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:22:49 executing program 2: syz_io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0x260}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000eda76019a70740ae94fa011b4ee7e8320001010000000000000000000000000c0002000000008000000000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xff3008967d41fb4a}, 0xc, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="5cffffff", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x46000}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = inotify_init1(0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x202040, 0x100) inotify_rm_watch(r2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(0xffffffffffffffff, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) pselect6(0x40, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 22:22:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1649.479835] 9pnet: Insufficient options for proto=fd [ 1649.596085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42989 sclass=netlink_route_socket pid=9513 comm=syz-executor.2 [ 1649.635072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42989 sclass=netlink_route_socket pid=9510 comm=syz-executor.2 [ 1663.448232] FAULT_INJECTION: forcing a failure. [ 1663.448232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.449838] CPU: 1 PID: 9524 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1663.450615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.451552] Call Trace: [ 1663.451860] dump_stack+0x107/0x167 [ 1663.452273] should_fail.cold+0x5/0xa [ 1663.452721] _copy_from_user+0x2e/0x1b0 [ 1663.453176] sock_do_ioctl+0x153/0x300 [ 1663.453623] ? compat_ifr_data_ioctl+0x180/0x180 [ 1663.454163] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1663.454815] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1663.455405] ? do_vfs_ioctl+0x283/0x10d0 [ 1663.455870] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1663.456477] ? generic_block_fiemap+0x60/0x60 [ 1663.456986] ? lock_downgrade+0x6d0/0x6d0 [ 1663.457722] sock_ioctl+0x3ef/0x710 [ 1663.458265] ? dlci_ioctl_set+0x30/0x30 [ 1663.458766] ? selinux_file_ioctl+0xb6/0x270 [ 1663.459264] ? dlci_ioctl_set+0x30/0x30 [ 1663.459712] __x64_sys_ioctl+0x19a/0x210 [ 1663.460172] do_syscall_64+0x33/0x40 [ 1663.460603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.461177] RIP: 0033:0x7fbed20b4b19 [ 1663.461596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:23:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000480), 0x0) io_uring_setup(0x6a32, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x4000201f}) r3 = epoll_create(0x3ff) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)={0x20000001}) dup2(r4, r1) waitid(0x0, r0, 0x0, 0x8, 0x0) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x1c) fcntl$setlease(r5, 0x400, 0x1) r6 = getpgrp(r0) wait4(r6, &(0x7f0000000140), 0x8, &(0x7f0000000240)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x1}, 0x7) 22:23:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:03 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x541b, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:03 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:03 executing program 1: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ppoll(&(0x7f0000000380)=[{r0, 0x14a}, {r0, 0x20}, {r2, 0x9403}, {r1, 0x9010}, {r3, 0x2004}, {r4, 0x308}, {r1, 0x100}], 0x7, &(0x7f0000000300), &(0x7f0000000340)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000002c0)='./file1\x00', r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="348e000017020007e500050000000000000061e3ba5f5599d0587d77addf6e5df0e94ca13e4de9f381a84460cb2661c4c769c8b3dc819d50b188714993b0ab76539130f93137fb52cfbf8f2678578c86f1828c4216e0da668b8bc125226324b6903288384b536e1b6501dd61c22c2e9a7e37f6838b49aade55a17bc88fa4560f5cfa16c479484d030045cc2cb430e14770ff130c44ebed9c4ec00cb9766f31bdf740eedd2c0ab6626a95241b4cc82264b28f23f4fff371a5d456ee8222ea0f94a6f70c9a4ba2f5b04069e2b31ecff5824a9c8f9ae50121f1b977220a3d5e9c1f5e99"], 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4bc4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="fc27ded990d9d93720b725b65b0c75b7740600a714ea90638bd252665adf01aff702c9179df9db40581de0893292922d4ccad0eba847d546d648c708c46c9929df42530fe1245410992a802a6fca7f72be6f64048280d0c81ac21c45ff487c1c2ef4e9d879dc40798c7c1721898125ac7785f81ea3c3f91ca37871f9edaf980c97fd921a931732f12ac3b2d5ff33a4921b2a6d7d595960b3429708e2b4113efd", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c01100100100000303130303030c00335000000000000000000"]) 22:23:03 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1663.463805] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.464805] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1663.465607] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1663.466410] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.467215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.468022] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1663.479362] FAULT_INJECTION: forcing a failure. [ 1663.479362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.480876] CPU: 1 PID: 9536 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 1663.481647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.482582] Call Trace: [ 1663.482879] dump_stack+0x107/0x167 [ 1663.483293] should_fail.cold+0x5/0xa [ 1663.483726] _copy_from_user+0x2e/0x1b0 [ 1663.484180] iovec_from_user+0x141/0x400 [ 1663.484652] __import_iovec+0x67/0x590 [ 1663.485097] io_import_iovec+0x581/0x1120 [ 1663.485574] ? io_complete_rw+0x230/0x230 [ 1663.486048] ? kiocb_done+0x16b/0xc90 [ 1663.486487] io_read+0xe14/0x11e0 [ 1663.486881] ? ext4_release_file+0x380/0x380 [ 1663.487384] ? kiocb_done+0xc90/0xc90 [ 1663.487818] ? mark_lock+0xf5/0x2df0 [ 1663.488245] ? lock_chain_count+0x20/0x20 [ 1663.488727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.489323] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1663.489945] ? __lock_acquire+0xbb1/0x5b00 [ 1663.490426] io_issue_sqe+0x2e8a/0x77b0 [ 1663.490878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.491472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1663.492064] ? SOFTIRQ_verbose+0x10/0x10 [ 1663.492531] ? io_connect+0x610/0x610 [ 1663.492964] ? lock_acquire+0x197/0x470 [ 1663.493413] ? find_held_lock+0x2c/0x110 [ 1663.493880] ? __fget_files+0x2cf/0x520 [ 1663.494331] ? lock_downgrade+0x6d0/0x6d0 [ 1663.494801] __io_queue_sqe+0x90/0x9d0 [ 1663.495244] ? io_issue_sqe+0x77b0/0x77b0 [ 1663.495712] ? __fget_files+0x2f8/0x520 [ 1663.496163] ? io_prep_rw+0x7f5/0x1050 [ 1663.496616] io_submit_sqes+0x44aa/0x8610 [ 1663.497101] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1663.497665] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1663.498209] ? find_held_lock+0x2c/0x110 [ 1663.498672] ? io_submit_sqes+0x8610/0x8610 [ 1663.499160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1663.499712] ? wait_for_completion_io+0x270/0x270 [ 1663.500258] ? rcu_read_lock_any_held+0x75/0xa0 [ 1663.500793] ? vfs_write+0x354/0xb10 [ 1663.501213] ? fput_many+0x2f/0x1a0 [ 1663.501626] ? ksys_write+0x1a9/0x260 [ 1663.502054] ? __ia32_sys_read+0xb0/0xb0 [ 1663.502514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.503110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.503694] do_syscall_64+0x33/0x40 [ 1663.504117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.504706] RIP: 0033:0x7f58d42d3b19 [ 1663.505125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.507208] RSP: 002b:00007f58d1849188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1663.508073] RAX: ffffffffffffffda RBX: 00007f58d43e6f60 RCX: 00007f58d42d3b19 [ 1663.508893] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1663.509697] RBP: 00007f58d18491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.510501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.511311] R13: 00007ffd9bd08c0f R14: 00007f58d1849300 R15: 0000000000022000 22:23:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1663.595090] FAULT_INJECTION: forcing a failure. [ 1663.595090] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.596649] CPU: 1 PID: 9546 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1663.597416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.598352] Call Trace: [ 1663.598656] dump_stack+0x107/0x167 [ 1663.599070] should_fail.cold+0x5/0xa [ 1663.599500] ? __alloc_skb+0x6d/0x5b0 [ 1663.599938] should_failslab+0x5/0x20 [ 1663.600376] kmem_cache_alloc_node+0x55/0x330 [ 1663.600889] __alloc_skb+0x6d/0x5b0 [ 1663.601305] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1663.601829] rtmsg_ifinfo+0x83/0x120 [ 1663.602251] __dev_notify_flags+0x22a/0x2c0 [ 1663.602743] ? dev_change_name+0x6b0/0x6b0 [ 1663.603223] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1663.603837] ? dev_change_flags+0x96/0x160 [ 1663.604310] ? dev_change_flags+0xa0/0x160 [ 1663.604793] dev_change_flags+0x100/0x160 [ 1663.605261] dev_ifsioc+0x5b9/0xa00 [ 1663.605681] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1663.606274] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1663.606880] dev_ioctl+0x23c/0xd30 [ 1663.607285] sock_do_ioctl+0x17d/0x300 [ 1663.607729] ? compat_ifr_data_ioctl+0x180/0x180 [ 1663.608271] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1663.608938] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1663.609519] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1663.610123] ? generic_block_fiemap+0x60/0x60 [ 1663.610634] ? lock_downgrade+0x6d0/0x6d0 [ 1663.611103] sock_ioctl+0x3ef/0x710 [ 1663.611515] ? dlci_ioctl_set+0x30/0x30 [ 1663.611967] ? selinux_file_ioctl+0xb6/0x270 [ 1663.612471] ? dlci_ioctl_set+0x30/0x30 [ 1663.612931] __x64_sys_ioctl+0x19a/0x210 [ 1663.613394] do_syscall_64+0x33/0x40 [ 1663.613814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.614391] RIP: 0033:0x7fbed20b4b19 [ 1663.614807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.616886] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.617758] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1663.618572] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1663.619383] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.620202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.621026] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1663.645408] kauditd_printk_skb: 11 callbacks suppressed [ 1663.645425] audit: type=1400 audit(1752013384.106:48): avc: denied { block_suspend } for pid=9530 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 22:23:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b47, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:04 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r3 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x40, 0x3, 0x8, 0x8, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x1400, 0x400}, 0x2000, 0x4, 0x7ff, 0x3, 0x2, 0x80, 0x9, 0x0, 0x751, 0x0, 0x8}, r4, 0x2, r5, 0x0) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/dm_mirror', 0x8002, 0xd1) sendmsg$unix(r1, &(0x7f0000000880)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="aab0d61cf40d28e4b4d1794160b3711a1eadc0c4", 0x14}, {&(0x7f00000003c0)="be0af98657f2302b48eda0fa6dacc87b4ca96a0a21eeedd84eaa9e3addcd5e0dba2c43c1af44a851f9f31356f7c520e42485a273880ba7c854f5fdcc21c2a3e719ab7056067bb91a90c3860a9eae23a9140d0cd7813088960c9510e2f95cda16ea967c18cb652e4fa6747d0c8f51145f5a57d952356257dd3e472e86426cfa51fff3dc4ec57a201ee87d6984e2dcf84cf04d622ab614d26aa3b82c23de0879fc8bc63dbcc771a4b17a87457e4f8e498fc2265a7173bc08988b0af7111efb6968deef18f9c006df7abb12774f9df779c4a55738d2d0c0bf", 0xd7}, {&(0x7f0000000500)="d43a49e28b76c3eb497a1e81950532f8d75f79f822fa1585899a0d68e5685b94c59f6eb77f9fea74cf4dd62a", 0x2c}, {&(0x7f0000000540)="8e", 0x1}], 0x4, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r0, r2, r2, 0xffffffffffffffff, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r6, r6, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r5, r2, r6, r8]}}], 0xb8, 0x5}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000002, 0x4000010, r0, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, 0x0, 0x0) syz_io_uring_submit(r9, r11, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x1139c0, 0x12345}, 0x200) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 22:23:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1663.750164] FAULT_INJECTION: forcing a failure. [ 1663.750164] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.751628] CPU: 1 PID: 9562 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1663.752428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.753368] Call Trace: [ 1663.753672] dump_stack+0x107/0x167 [ 1663.754084] should_fail.cold+0x5/0xa [ 1663.754514] ? create_object.isra.0+0x3a/0xa20 [ 1663.755029] should_failslab+0x5/0x20 [ 1663.755457] kmem_cache_alloc+0x5b/0x310 [ 1663.755913] create_object.isra.0+0x3a/0xa20 [ 1663.756413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1663.756987] kmem_cache_alloc_node+0x169/0x330 [ 1663.757506] __alloc_skb+0x6d/0x5b0 [ 1663.757925] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1663.758451] rtmsg_ifinfo+0x83/0x120 [ 1663.758874] __dev_notify_flags+0x22a/0x2c0 [ 1663.759357] ? dev_change_name+0x6b0/0x6b0 [ 1663.759828] ? __dev_change_flags+0x4cf/0x6e0 [ 1663.760340] ? dev_set_allmulti+0x30/0x30 [ 1663.760811] ? lock_acquire+0x197/0x470 [ 1663.761254] ? full_name_hash+0xb5/0xf0 [ 1663.761702] dev_change_flags+0x100/0x160 [ 1663.762170] dev_ifsioc+0x5b9/0xa00 [ 1663.762577] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1663.763177] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1663.763768] dev_ioctl+0x23c/0xd30 [ 1663.764175] sock_do_ioctl+0x17d/0x300 [ 1663.764620] ? compat_ifr_data_ioctl+0x180/0x180 [ 1663.765152] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1663.765793] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1663.766371] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1663.766956] ? generic_block_fiemap+0x60/0x60 [ 1663.767455] ? lock_downgrade+0x6d0/0x6d0 [ 1663.767920] sock_ioctl+0x3ef/0x710 [ 1663.768326] ? dlci_ioctl_set+0x30/0x30 [ 1663.768793] ? selinux_file_ioctl+0xb6/0x270 [ 1663.769289] ? dlci_ioctl_set+0x30/0x30 [ 1663.769735] __x64_sys_ioctl+0x19a/0x210 [ 1663.770193] do_syscall_64+0x33/0x40 [ 1663.770609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.771184] RIP: 0033:0x7fbed20b4b19 [ 1663.771600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.773664] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.774517] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1663.775313] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1663.776107] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.776905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.777699] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1663.809795] FAULT_INJECTION: forcing a failure. [ 1663.809795] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.811265] CPU: 1 PID: 9566 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 1663.812044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.813001] Call Trace: [ 1663.813306] dump_stack+0x107/0x167 [ 1663.813725] should_fail.cold+0x5/0xa [ 1663.814166] should_failslab+0x5/0x20 [ 1663.814602] kmem_cache_alloc_bulk+0x4b/0x320 [ 1663.815119] io_submit_sqes+0x6fe6/0x8610 [ 1663.815611] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1663.816177] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1663.816754] ? find_held_lock+0x2c/0x110 [ 1663.817224] ? io_submit_sqes+0x8610/0x8610 [ 1663.817722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1663.818274] ? wait_for_completion_io+0x270/0x270 [ 1663.818832] ? rcu_read_lock_any_held+0x75/0xa0 [ 1663.819365] ? vfs_write+0x354/0xb10 [ 1663.819788] ? fput_many+0x2f/0x1a0 [ 1663.820206] ? ksys_write+0x1a9/0x260 [ 1663.820647] ? __ia32_sys_read+0xb0/0xb0 [ 1663.821113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.821714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.822304] do_syscall_64+0x33/0x40 [ 1663.822728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.823313] RIP: 0033:0x7f58d42d3b19 [ 1663.823738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.825847] RSP: 002b:00007f58d1849188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1663.826712] RAX: ffffffffffffffda RBX: 00007f58d43e6f60 RCX: 00007f58d42d3b19 [ 1663.827533] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1663.828347] RBP: 00007f58d18491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.829150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.829960] R13: 00007ffd9bd08c0f R14: 00007f58d1849300 R15: 0000000000022000 22:23:04 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5421, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:17 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:17 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:17 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b49, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:17 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5450, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1517f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:17 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:17 executing program 1: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, r1) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xbf, 0x9, 0x80, 0x0, 0xffffffffffffffff, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xec1d, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x10000, 0x800, 0x440a00, 0x6, 0x8, 0x7, 0x101, 0x0, 0x7, 0x0, 0x4}, r3, 0xc, r0, 0xa) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) fallocate(r4, 0x0, 0x0, 0x8800000) 22:23:17 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = accept(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8902, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x4800) [ 1676.850063] FAULT_INJECTION: forcing a failure. [ 1676.850063] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.853207] CPU: 0 PID: 9592 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1676.854941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.857077] Call Trace: [ 1676.857753] dump_stack+0x107/0x167 [ 1676.858702] should_fail.cold+0x5/0xa [ 1676.859694] should_failslab+0x5/0x20 [ 1676.860692] __kmalloc_node_track_caller+0x74/0x3b0 [ 1676.861973] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1676.863191] __alloc_skb+0xb1/0x5b0 [ 1676.864131] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1676.865316] rtmsg_ifinfo+0x83/0x120 [ 1676.866277] __dev_notify_flags+0x22a/0x2c0 [ 1676.867380] ? dev_change_name+0x6b0/0x6b0 [ 1676.868445] ? __dev_change_flags+0x4cf/0x6e0 [ 1676.869614] ? dev_set_allmulti+0x30/0x30 [ 1676.870680] dev_change_flags+0x100/0x160 [ 1676.871761] dev_ifsioc+0x5b9/0xa00 [ 1676.872716] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1676.874071] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1676.875434] dev_ioctl+0x23c/0xd30 [ 1676.876355] sock_do_ioctl+0x17d/0x300 [ 1676.877366] ? compat_ifr_data_ioctl+0x180/0x180 [ 1676.878591] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1676.880065] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1676.881403] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1676.882628] ? generic_block_fiemap+0x60/0x60 [ 1676.883653] ? lock_downgrade+0x6d0/0x6d0 [ 1676.884613] sock_ioctl+0x3ef/0x710 [ 1676.885441] ? dlci_ioctl_set+0x30/0x30 [ 1676.886353] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1676.887599] ? dlci_ioctl_set+0x30/0x30 [ 1676.888519] __x64_sys_ioctl+0x19a/0x210 [ 1676.889451] do_syscall_64+0x33/0x40 [ 1676.890303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.891472] RIP: 0033:0x7fbed20b4b19 [ 1676.892315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.896517] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.898259] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1676.899873] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1676.901487] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.902799] FAULT_INJECTION: forcing a failure. [ 1676.902799] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.903073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.903128] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1676.907719] CPU: 1 PID: 9611 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 1676.908508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.909454] Call Trace: [ 1676.909766] dump_stack+0x107/0x167 [ 1676.910189] should_fail.cold+0x5/0xa [ 1676.910629] ? create_object.isra.0+0x3a/0xa20 [ 1676.911155] should_failslab+0x5/0x20 [ 1676.911595] kmem_cache_alloc+0x5b/0x310 [ 1676.912060] ? mark_held_locks+0x9e/0xe0 [ 1676.912537] create_object.isra.0+0x3a/0xa20 [ 1676.913045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.913628] kmem_cache_alloc+0x159/0x310 [ 1676.914105] xas_alloc+0x336/0x440 [ 1676.914513] xas_create+0x34a/0x10d0 [ 1676.914941] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1676.915549] xas_store+0x8c/0x1c40 [ 1676.915974] __xa_store+0x164/0x2d0 [ 1676.916389] ? xa_delete_node+0x280/0x280 [ 1676.916875] ? trace_hardirqs_on+0x5b/0x180 [ 1676.917375] xa_store+0x31/0x50 [ 1676.917758] __io_uring_add_tctx_node+0x1cf/0x520 [ 1676.918303] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1676.918921] __do_sys_io_uring_enter+0x146f/0x1890 [ 1676.919482] ? find_held_lock+0x2c/0x110 [ 1676.919951] ? io_submit_sqes+0x8610/0x8610 [ 1676.920450] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.921010] ? wait_for_completion_io+0x270/0x270 [ 1676.921564] ? rcu_read_lock_any_held+0x75/0xa0 [ 1676.922096] ? vfs_write+0x354/0xb10 [ 1676.922525] ? fput_many+0x2f/0x1a0 [ 1676.922936] ? ksys_write+0x1a9/0x260 [ 1676.923368] ? __ia32_sys_read+0xb0/0xb0 [ 1676.923828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.924422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.925028] do_syscall_64+0x33/0x40 [ 1676.925451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.926035] RIP: 0033:0x7f58d42d3b19 [ 1676.926457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.928532] RSP: 002b:00007f58d1828188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1676.929391] RAX: ffffffffffffffda RBX: 00007f58d43e7020 RCX: 00007f58d42d3b19 [ 1676.930210] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1676.931017] RBP: 00007f58d18281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.931830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.932645] R13: 00007ffd9bd08c0f R14: 00007f58d1828300 R15: 0000000000022000 22:23:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:17 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1676.978533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1676.979398] print_req_error: 95 callbacks suppressed [ 1676.979417] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1676.982998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1676.984092] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1676.986620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1676.987242] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1676.992022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1676.993094] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 22:23:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1676.998833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1676.999501] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1677.003002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.003750] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1677.005076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.005725] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1677.009312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.010063] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 1677.012571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.013211] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1677.014673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.015301] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1677.017771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.018506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.019303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.020419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.021330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.023286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.024091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.024996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.026080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.027351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.028074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.028998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.029834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.030701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.031407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.032233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.032992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.033836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.034572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.035342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.036097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5411, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1677.038145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.038938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.039736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.040422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.041268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.042849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.043623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.044346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.045195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.046051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.046856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.047621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.049533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.050228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.052104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.052826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.054769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.055490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.057349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.058092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.059701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.061574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.062260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.062972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.064811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.066333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.067809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.069294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.071076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.084691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.086818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.088221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 5) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1677.110770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.112329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.114006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5451, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 1677.135344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.136883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.138702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.150165] FAULT_INJECTION: forcing a failure. [ 1677.150165] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.151650] CPU: 1 PID: 9631 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1677.152422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1677.153364] Call Trace: [ 1677.153669] dump_stack+0x107/0x167 [ 1677.154083] should_fail.cold+0x5/0xa [ 1677.154513] ? ___slab_alloc+0x360/0x700 [ 1677.154983] ? create_object.isra.0+0x3a/0xa20 [ 1677.155500] should_failslab+0x5/0x20 [ 1677.155938] kmem_cache_alloc+0x5b/0x310 [ 1677.156406] create_object.isra.0+0x3a/0xa20 [ 1677.156905] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1677.157484] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1677.158065] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1677.158605] __alloc_skb+0xb1/0x5b0 [ 1677.158713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.159022] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1677.160425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.160699] rtmsg_ifinfo+0x83/0x120 [ 1677.160712] __dev_notify_flags+0x22a/0x2c0 [ 1677.160722] ? dev_change_name+0x6b0/0x6b0 [ 1677.160737] ? __dev_change_flags+0x4cf/0x6e0 [ 1677.163784] ? dev_set_allmulti+0x30/0x30 [ 1677.164262] ? lock_acquire+0x197/0x470 [ 1677.164718] ? full_name_hash+0xb5/0xf0 [ 1677.165177] dev_change_flags+0x100/0x160 [ 1677.165648] dev_ifsioc+0x5b9/0xa00 [ 1677.166059] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1677.166649] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1677.167244] dev_ioctl+0x23c/0xd30 [ 1677.167650] sock_do_ioctl+0x17d/0x300 [ 1677.168102] ? compat_ifr_data_ioctl+0x180/0x180 [ 1677.168658] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1677.169305] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1677.169888] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1677.170487] ? generic_block_fiemap+0x60/0x60 [ 1677.170992] ? lock_downgrade+0x6d0/0x6d0 [ 1677.171465] sock_ioctl+0x3ef/0x710 [ 1677.171874] ? dlci_ioctl_set+0x30/0x30 [ 1677.171948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.172329] ? selinux_file_ioctl+0xb6/0x270 [ 1677.174004] ? dlci_ioctl_set+0x30/0x30 [ 1677.174453] __x64_sys_ioctl+0x19a/0x210 [ 1677.174912] do_syscall_64+0x33/0x40 [ 1677.175333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1677.175912] RIP: 0033:0x7fbed20b4b19 [ 1677.176331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.178414] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1677.179275] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1677.179419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.180079] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1677.180085] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.180091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.180096] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1677.199782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1677.203138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.210070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.212035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.213874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.215284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.216879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.218412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.220053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.221799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.223308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, 0x0) [ 1677.224878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.227581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.229080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.230719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.232834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.234406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.235918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.237578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.239688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.241262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.242702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.244395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.246270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.254009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.255970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.260836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.263205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.265972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.267445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.269627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.271435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.273585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.275659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.277314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.280196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x541b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1677.283103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.284700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.287431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.289873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.292422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 1: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, r1) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xbf, 0x9, 0x80, 0x0, 0xffffffffffffffff, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xec1d, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x10000, 0x800, 0x440a00, 0x6, 0x8, 0x7, 0x101, 0x0, 0x7, 0x0, 0x4}, r3, 0xc, r0, 0xa) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) fallocate(r4, 0x0, 0x0, 0x8800000) [ 1677.293937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.296911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.298909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.300904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.302356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.304344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.306767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.312869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.314387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.315799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.319296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.321179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.322764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.324446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.331727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.334171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.336298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.338454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.340203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.342172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.343650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.346891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.348480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.353276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.355133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.357076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.359094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.360667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.362131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.364331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.367288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.369156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.371175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.372770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.374298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1677.375842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.377523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.380063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.381710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.385455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.387077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.388912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.390424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.391887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, 0x0) [ 1677.393358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.395956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.397567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.399184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.400772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.402256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.403753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.405716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.407128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.408808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.410793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.412278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.413813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:17 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5452, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 1677.425214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.427403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.428853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.430241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.431795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.435741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.437979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.440176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.442231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.443920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.445824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.447395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.456836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.460993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.462443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.463930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.465367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.466760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.472859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.474295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.476450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.478194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.479966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.481761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.484092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.485698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.487211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.488833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.490631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.492303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.494134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.495652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.497059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.498523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.499913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.501347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.502851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.504306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.505720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.507149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.508585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.509978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.511397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.512790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.514327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.515735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.517187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.518609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.520030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.521433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.522863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.524230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.525783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.527213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.528677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.530112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.531562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.534342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.535825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.537266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.538864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.540406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.542419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.544737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.546705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.548736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.550391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.551864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.555660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.557229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.559650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.561547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.563070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.564611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.566043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.567427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.568975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.570395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.571835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.573246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.574680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.576136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.577620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.579060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.580644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.582063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.583528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.584951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.587136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.588986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.590726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.592112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.597685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.599115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.601407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.602815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.604237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.605687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.607128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.608540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.610071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.614957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.616449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.617866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.619293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.620722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.622163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.623564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.625109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.626571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.628005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.629448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.630914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.633151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.634743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.636144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.637748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.639224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.640681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.642142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.643617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.645065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.646550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.647973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.649590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.651058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.652567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.654017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.655506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.659587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.661438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.662867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.664424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.665933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.667382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.668851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.670304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.671743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.673208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.674661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.676232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.677726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.679253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.680739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.683227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.684701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.686166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.687652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.689229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.690714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.692179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.693652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.695105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.696571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.698220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.699683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.701887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.703387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.705262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.707796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.709439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.710919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.712388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.713852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.715432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.716939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.718408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.719858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.721350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.722801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.724284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.725719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.727328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.728855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.730314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.731814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.733309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.734793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.736258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.737732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.739295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.740842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.742299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.743776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.745251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.746744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.748209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.749696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.751276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.752823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.754297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.755789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.757261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.762197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.763690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.765192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.766808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.768340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.769858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.771361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.772871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.774376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.775884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.777411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.779020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.780686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.782199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.783717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.785254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.786765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.788282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.789647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1677.791029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 22:23:32 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:32 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec, 0x80) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f0000003c80)=""/216, 0xd8}], 0x1, &(0x7f0000000100)=""/10, 0xa}, 0x5}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f00000035c0)=""/172, 0xac}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, &(0x7f00000007c0)=""/126, 0x7e}, 0x1}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000980)=""/140, 0x8c}, {&(0x7f0000000a40)=""/56, 0x38}], 0x4, &(0x7f0000002100)=""/18, 0x12}, 0x80}, {{&(0x7f0000000b00)=@ax25={{0x3, @default}, [@bcast, @bcast, @rose, @netrom, @bcast, @default, @rose, @netrom]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/176, 0xb0}], 0x1, &(0x7f0000000c80)=""/130, 0x82}, 0xfffffff8}, {{&(0x7f0000000d40)=@pppol2tpv3in6, 0x80, &(0x7f0000002240)=[{&(0x7f0000000dc0)=""/48, 0x30}, {&(0x7f0000000e00)=""/218, 0xda}, {&(0x7f0000000f00)=""/16, 0x10}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/184, 0xb8}, {&(0x7f0000002000)=""/170, 0xaa}, {&(0x7f00000020c0)=""/33, 0x21}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/223, 0xdf}], 0x9, &(0x7f0000002300)=""/8, 0x8}, 0x8}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002340)=""/174, 0xae}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/72, 0x48}, {&(0x7f0000003480)=""/177, 0xb1}, {&(0x7f0000003540)=""/119, 0x77}, {&(0x7f0000003bc0)=""/159, 0x9f}], 0x6}, 0x21f}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003780)=""/99, 0x63}, {&(0x7f0000003800)=""/78, 0x4e}], 0x2, &(0x7f00000038c0)=""/222, 0xde}, 0x4}], 0x7, 0x10000, &(0x7f0000003b80)={0x0, 0x3938700}) 22:23:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5421, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:32 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:32 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, 0x0) 22:23:32 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5460, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0xd8499488957a772f}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6d}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}]}, 0x64}}, 0x80) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 22:23:32 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1691.859874] FAULT_INJECTION: forcing a failure. [ 1691.859874] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.861313] CPU: 1 PID: 9671 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1691.862101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.863063] Call Trace: [ 1691.863374] dump_stack+0x107/0x167 [ 1691.863797] should_fail.cold+0x5/0xa [ 1691.864244] should_failslab+0x5/0x20 [ 1691.864695] __kmalloc_node_track_caller+0x74/0x3b0 [ 1691.865277] ? netlink_trim+0x1ee/0x250 [ 1691.865744] pskb_expand_head+0x15a/0x1040 [ 1691.866242] netlink_trim+0x1ee/0x250 [ 1691.866685] netlink_broadcast_filtered+0x62/0xe00 [ 1691.867253] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1691.867803] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 1691.868355] nlmsg_notify+0x94/0x290 [ 1691.868797] rtmsg_ifinfo+0xf5/0x120 [ 1691.869228] __dev_notify_flags+0x22a/0x2c0 [ 1691.869728] ? dev_change_name+0x6b0/0x6b0 [ 1691.870227] ? __dev_change_flags+0x4cf/0x6e0 [ 1691.870746] ? dev_set_allmulti+0x30/0x30 [ 1691.871235] ? lock_acquire+0x197/0x470 [ 1691.871697] ? full_name_hash+0xb5/0xf0 [ 1691.872160] dev_change_flags+0x100/0x160 [ 1691.872652] dev_ifsioc+0x5b9/0xa00 [ 1691.873073] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1691.873678] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1691.874286] dev_ioctl+0x23c/0xd30 [ 1691.874701] sock_do_ioctl+0x17d/0x300 [ 1691.875156] ? compat_ifr_data_ioctl+0x180/0x180 [ 1691.875709] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1691.876386] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1691.877002] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1691.877610] ? generic_block_fiemap+0x60/0x60 [ 1691.878133] ? lock_downgrade+0x6d0/0x6d0 [ 1691.878615] sock_ioctl+0x3ef/0x710 [ 1691.879040] ? dlci_ioctl_set+0x30/0x30 [ 1691.879508] ? selinux_file_ioctl+0xb6/0x270 [ 1691.880025] ? dlci_ioctl_set+0x30/0x30 [ 1691.880487] __x64_sys_ioctl+0x19a/0x210 [ 1691.880972] do_syscall_64+0x33/0x40 [ 1691.881404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1691.882000] RIP: 0033:0x7fbed20b4b19 [ 1691.882431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.884581] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1691.885476] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1691.886316] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1691.887153] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.887981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.888814] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 22:23:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5450, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5451, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:32 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5452, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:46 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@acquire={0x128, 0x28, 0x1, 0x0, 0x0, {{@in=@private}, @in6=@private1, {@in6=@private2, @in6=@private2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="49a334af569c3ef9ce1ddafe3df9c2a518f51d9620794ce7ecf7ed34a1c4608def", 0x21}, {0x0}], 0x2, 0x14}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44051) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9e4b52b00a91d7a5, &(0x7f0000000200)=0x1f, 0x4) sendfile(r1, r2, 0x0, 0x100000001) 22:23:46 executing program 2: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000480)='gid_map\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a285c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ad8b3af258566322480d639d5c4000000000000000400000000000000fd10a8043847d417fa82a2e32e4aae21d527eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24ae1800000000000071e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f993b1d664447ac17eb377c791a13d468d6c0100000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9070799365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1"]) getdents(r4, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r3, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x10) unshare(0x48020200) [ 1706.422175] FAULT_INJECTION: forcing a failure. [ 1706.422175] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.424937] FAULT_INJECTION: forcing a failure. [ 1706.424937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.425377] CPU: 0 PID: 9708 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1706.428483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.430629] Call Trace: [ 1706.431324] dump_stack+0x107/0x167 [ 1706.432269] should_fail.cold+0x5/0xa [ 1706.433265] ? create_object.isra.0+0x3a/0xa20 [ 1706.434449] should_failslab+0x5/0x20 [ 1706.435437] kmem_cache_alloc+0x5b/0x310 [ 1706.436500] create_object.isra.0+0x3a/0xa20 [ 1706.437638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1706.438954] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1706.440251] ? netlink_trim+0x1ee/0x250 [ 1706.441308] pskb_expand_head+0x15a/0x1040 [ 1706.442423] netlink_trim+0x1ee/0x250 [ 1706.443410] netlink_broadcast_filtered+0x62/0xe00 [ 1706.444679] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1706.445926] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 1706.447156] nlmsg_notify+0x94/0x290 [ 1706.448118] rtmsg_ifinfo+0xf5/0x120 [ 1706.449085] __dev_notify_flags+0x22a/0x2c0 [ 1706.450045] ? dev_change_name+0x6b0/0x6b0 [ 1706.450939] ? __dev_change_flags+0x4cf/0x6e0 [ 1706.451906] ? dev_set_allmulti+0x30/0x30 [ 1706.452815] ? lock_acquire+0x197/0x470 [ 1706.453671] ? full_name_hash+0xb5/0xf0 [ 1706.454532] dev_change_flags+0x100/0x160 [ 1706.455427] dev_ifsioc+0x5b9/0xa00 [ 1706.456213] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1706.457346] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1706.458474] dev_ioctl+0x23c/0xd30 [ 1706.459240] sock_do_ioctl+0x17d/0x300 [ 1706.460073] ? compat_ifr_data_ioctl+0x180/0x180 [ 1706.461088] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1706.462317] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1706.463421] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1706.464529] ? generic_block_fiemap+0x60/0x60 [ 1706.465493] ? lock_downgrade+0x6d0/0x6d0 [ 1706.466384] sock_ioctl+0x3ef/0x710 [ 1706.467160] ? dlci_ioctl_set+0x30/0x30 [ 1706.468014] ? selinux_file_ioctl+0xb6/0x270 [ 1706.468995] ? dlci_ioctl_set+0x30/0x30 [ 1706.469895] __x64_sys_ioctl+0x19a/0x210 [ 1706.470768] do_syscall_64+0x33/0x40 [ 1706.471563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.472656] RIP: 0033:0x7fbed20b4b19 [ 1706.473449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.477372] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.478995] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1706.480523] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1706.482059] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.483588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.485141] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1706.486733] CPU: 1 PID: 9722 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1706.487768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.488972] Call Trace: [ 1706.489360] dump_stack+0x107/0x167 [ 1706.489880] should_fail.cold+0x5/0xa [ 1706.490426] _copy_from_user+0x2e/0x1b0 [ 1706.491000] sock_do_ioctl+0x153/0x300 [ 1706.491557] ? compat_ifr_data_ioctl+0x180/0x180 [ 1706.492233] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1706.493064] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1706.493875] ? do_vfs_ioctl+0x283/0x10d0 [ 1706.494444] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1706.495177] ? generic_block_fiemap+0x60/0x60 [ 1706.495804] ? lock_downgrade+0x6d0/0x6d0 [ 1706.496406] sock_ioctl+0x3ef/0x710 [ 1706.496929] ? dlci_ioctl_set+0x30/0x30 [ 1706.497498] ? selinux_file_ioctl+0xb6/0x270 [ 1706.498136] ? dlci_ioctl_set+0x30/0x30 [ 1706.498700] __x64_sys_ioctl+0x19a/0x210 [ 1706.499278] do_syscall_64+0x33/0x40 [ 1706.499809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.500529] RIP: 0033:0x7fe192ab9b19 [ 1706.501064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.503679] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.504249] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1706.504781] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1706.504790] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1706.504797] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.504804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.504811] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:23:46 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8902, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:23:46 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5460, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:46 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:46 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:47 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:47 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:47 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:23:47 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1706.668248] FAULT_INJECTION: forcing a failure. [ 1706.668248] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.669854] CPU: 1 PID: 9741 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1706.670671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.671658] Call Trace: [ 1706.671980] dump_stack+0x107/0x167 [ 1706.672411] should_fail.cold+0x5/0xa [ 1706.672879] ? __alloc_skb+0x6d/0x5b0 [ 1706.673333] should_failslab+0x5/0x20 [ 1706.673789] kmem_cache_alloc_node+0x55/0x330 [ 1706.674321] __alloc_skb+0x6d/0x5b0 [ 1706.674761] inet6_rt_notify+0xed/0x2a0 [ 1706.675235] fib6_del+0xf4c/0x1540 [ 1706.675664] ? fib6_locate+0x660/0x660 [ 1706.676126] ? fib6_ifdown+0xca/0x8f0 [ 1706.676581] fib6_clean_node+0x39e/0x570 [ 1706.677076] ? fib6_del+0x1540/0x1540 [ 1706.677528] ? fib6_clean_tree+0x14c/0x260 [ 1706.678034] fib6_walk_continue+0x35c/0x710 [ 1706.678549] ? trace_hardirqs_on+0x5b/0x180 [ 1706.679062] fib6_clean_tree+0x154/0x260 [ 1706.679536] ? fib6_ifup+0x2a0/0x2a0 [ 1706.679974] ? fib6_info_destroy_rcu+0x210/0x210 [ 1706.680539] ? fib6_del+0x1540/0x1540 [ 1706.680994] ? fib6_ifup+0x2a0/0x2a0 [ 1706.681432] ? spin_bug+0x100/0x100 [ 1706.681862] ? fib6_ifup+0x2a0/0x2a0 [ 1706.682299] __fib6_clean_all+0xf0/0x2a0 [ 1706.682782] rt6_disable_ip+0x4e9/0x5d0 [ 1706.683257] ? lock_chain_count+0x20/0x20 [ 1706.683757] ? rt6_sync_down_dev+0x160/0x160 [ 1706.684273] ? __lock_acquire+0x1657/0x5b00 [ 1706.684797] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1706.685359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1706.685991] ? addrconf_dad_run+0x180/0x180 [ 1706.686504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1706.687134] addrconf_notify+0x161/0x2390 [ 1706.687627] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1706.688304] ? tun_device_event+0x71/0x1160 [ 1706.688818] ? mark_held_locks+0x9e/0xe0 [ 1706.689301] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1706.689913] ? inet6_ifinfo_notify+0x150/0x150 [ 1706.690454] ? failover_register+0x530/0x530 [ 1706.690994] raw_notifier_call_chain+0xb3/0x110 [ 1706.691551] call_netdevice_notifiers_info+0xba/0x130 [ 1706.692169] __dev_notify_flags+0x1de/0x2c0 [ 1706.692680] ? dev_change_name+0x6b0/0x6b0 [ 1706.693186] ? __dev_change_flags+0x4cf/0x6e0 [ 1706.693720] ? dev_set_allmulti+0x30/0x30 [ 1706.694212] ? lock_acquire+0x197/0x470 [ 1706.694682] ? full_name_hash+0xb5/0xf0 [ 1706.695157] dev_change_flags+0x100/0x160 [ 1706.695656] dev_ifsioc+0x5b9/0xa00 [ 1706.696091] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1706.696718] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1706.697352] dev_ioctl+0x23c/0xd30 [ 1706.697777] sock_do_ioctl+0x17d/0x300 [ 1706.698237] ? compat_ifr_data_ioctl+0x180/0x180 [ 1706.698800] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1706.699478] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1706.700080] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1706.700680] ? generic_block_fiemap+0x60/0x60 [ 1706.701200] ? lock_downgrade+0x6d0/0x6d0 [ 1706.701691] sock_ioctl+0x3ef/0x710 [ 1706.702107] ? dlci_ioctl_set+0x30/0x30 [ 1706.702577] ? selinux_file_ioctl+0xb6/0x270 [ 1706.703088] ? dlci_ioctl_set+0x30/0x30 [ 1706.703548] __x64_sys_ioctl+0x19a/0x210 [ 1706.704016] do_syscall_64+0x33/0x40 [ 1706.704443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.705041] RIP: 0033:0x7fbed20b4b19 [ 1706.705470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.707578] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.708454] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1706.709278] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1706.710094] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.710913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.711732] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 22:23:47 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8902, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1706.762830] FAULT_INJECTION: forcing a failure. [ 1706.762830] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.764347] CPU: 1 PID: 9747 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1706.765186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.766176] Call Trace: [ 1706.766493] dump_stack+0x107/0x167 [ 1706.766923] should_fail.cold+0x5/0xa [ 1706.767374] ? __alloc_skb+0x6d/0x5b0 [ 1706.767825] should_failslab+0x5/0x20 [ 1706.768276] kmem_cache_alloc_node+0x55/0x330 [ 1706.768823] __alloc_skb+0x6d/0x5b0 [ 1706.769253] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1706.769800] rtmsg_ifinfo+0x83/0x120 [ 1706.770240] __dev_notify_flags+0x22a/0x2c0 [ 1706.770752] ? dev_change_name+0x6b0/0x6b0 [ 1706.771252] ? __dev_change_flags+0x4cf/0x6e0 [ 1706.771786] ? dev_set_allmulti+0x30/0x30 [ 1706.772284] ? lock_acquire+0x197/0x470 [ 1706.772765] ? full_name_hash+0xb5/0xf0 [ 1706.773240] dev_change_flags+0x100/0x160 [ 1706.773731] dev_ifsioc+0x5b9/0xa00 [ 1706.774169] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1706.774791] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1706.775415] dev_ioctl+0x23c/0xd30 [ 1706.775838] sock_do_ioctl+0x17d/0x300 [ 1706.776303] ? compat_ifr_data_ioctl+0x180/0x180 [ 1706.776884] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1706.777565] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1706.778018] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1706.778188] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1706.780690] ? generic_block_fiemap+0x60/0x60 [ 1706.781247] ? lock_downgrade+0x6d0/0x6d0 [ 1706.781750] sock_ioctl+0x3ef/0x710 [ 1706.782178] ? dlci_ioctl_set+0x30/0x30 [ 1706.782650] ? selinux_file_ioctl+0xb6/0x270 [ 1706.783171] ? dlci_ioctl_set+0x30/0x30 [ 1706.783640] __x64_sys_ioctl+0x19a/0x210 [ 1706.784120] do_syscall_64+0x33/0x40 [ 1706.784563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.785179] RIP: 0033:0x7fe192ab9b19 [ 1706.785615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.787774] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.788674] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1706.789526] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1706.790365] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.791202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.792037] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:23:47 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x21030000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:23:47 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:02 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:02 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 9) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:02 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8903, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9fffffff0800000000008000000000000000000300000014120d2300000000070000019800000000"], 0x46000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8000000ffffffff, 0x7, &(0x7f0000000280)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af4", 0x6a, 0xfffffffffffff1f1}, {0x0, 0x0, 0x206}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}, {&(0x7f0000000100)="59ee80", 0x3}, {&(0x7f00000008c0)="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", 0x1000, 0x3ff}, {&(0x7f00000001c0)="5e7ec76145f2821c037524fa7f09dd8969bc2d5993c5f632c34e7f432144cdaf6504daa00db2c1636bcc3947b41f04c0d6a8ca5730a2", 0x36, 0x3}], 0x82024, &(0x7f00000018c0)={[{'/\xe0'}, {'/dev/vcs#\x00'}], [{@euid_lt}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfshat}, {@pcr={'pcr', 0x3d, 0xc}}, {@subj_role={'subj_role', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, 'maps\x00'}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 22:24:02 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:02 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:02 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8903, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xae, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0xfffffffffffffffe) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000009000e1ff090000008848663ac10b0acdbfec19095d290000000000000005800000000000001100fca4487fec"], 0x30}}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ad88601b1f061177586a9207aa13cf57c0be481bcfc681073561b0581b2cc2b2f2348f209f30df9a12b25e1b33cfc4917be070c05af51e811ab71efc01b054866b8377ca6bfae7e47fe72466b0e94db1d05dfa96175a1b43b6d27ced9be161c18f17b66612f0b4bbf5f34dfa3f3343d93581d42d2eb4df167c3ef0fdb64547af9fe75672f3163f5df6f18050180b0cd744ac6741785000c767f4ed49d637b149271dd477c1c1049f5f78e3d84753b03ef817e04452b9005535373bb74c4342fc269da3627a2900f16f4f71ba8effe06f42b71b9db59292614ae0a3442620026920fb5d0cc7a318be4dcf03af27f8943870314e2695", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf25010000000048e01e344100000014001462726f6164636173742d6c696e6b"], 0x30}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) lseek(r0, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYBLOB="40f634c43b", @ANYBLOB="2dcadbce1e98ace8da0b4dfec1f216461337bcd377ae8319be7dd63193f293a9864d5901d97776f5aea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b5ec193128d1578333cb4d78d81441041bc4cbc14e5e8a000d"], 0x100}}, 0x10) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000380)="7346ee6f663c4f4e230051082387a8bd0a5e2ea0006679717cbbeec48d420791b28149fa7ff20e30e40635bf192156e94404301ad8f9d707d2053cb009ce60eed80cb3f9ac6a601a8bbd793ce144f7568ceccc73dde5b816e2484de12b0b8e415c0a819455") unshare(0x48020200) [ 1722.393473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=9785 comm=syz-executor.2 [ 1722.400372] FAULT_INJECTION: forcing a failure. [ 1722.400372] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.402942] CPU: 1 PID: 9777 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1722.404402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.406176] Call Trace: [ 1722.406745] dump_stack+0x107/0x167 [ 1722.407509] should_fail.cold+0x5/0xa [ 1722.408331] ? create_object.isra.0+0x3a/0xa20 [ 1722.409330] should_failslab+0x5/0x20 [ 1722.410149] kmem_cache_alloc+0x5b/0x310 [ 1722.411023] ? lock_acquire+0x197/0x470 [ 1722.411884] create_object.isra.0+0x3a/0xa20 [ 1722.412819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1722.413920] kmem_cache_alloc_node+0x169/0x330 [ 1722.414889] __alloc_skb+0x6d/0x5b0 [ 1722.415673] inet6_rt_notify+0xed/0x2a0 [ 1722.416508] fib6_del+0xf4c/0x1540 [ 1722.417302] ? fib6_locate+0x660/0x660 [ 1722.418141] ? fib6_ifdown+0xca/0x8f0 [ 1722.418965] fib6_clean_node+0x39e/0x570 [ 1722.419842] ? fib6_del+0x1540/0x1540 [ 1722.420667] ? fib6_clean_tree+0x14c/0x260 [ 1722.421618] fib6_walk_continue+0x35c/0x710 [ 1722.422535] ? trace_hardirqs_on+0x5b/0x180 [ 1722.423475] fib6_clean_tree+0x154/0x260 [ 1722.424420] ? fib6_ifup+0x2a0/0x2a0 [ 1722.425237] ? fib6_info_destroy_rcu+0x210/0x210 [ 1722.426269] ? fib6_del+0x1540/0x1540 [ 1722.427080] ? fib6_ifup+0x2a0/0x2a0 [ 1722.427870] ? spin_bug+0x100/0x100 [ 1722.428659] ? fib6_ifup+0x2a0/0x2a0 [ 1722.429451] __fib6_clean_all+0xf0/0x2a0 [ 1722.430336] rt6_disable_ip+0x4e9/0x5d0 [ 1722.431180] ? lock_chain_count+0x20/0x20 [ 1722.432066] ? rt6_sync_down_dev+0x160/0x160 [ 1722.433008] ? __lock_acquire+0x1657/0x5b00 [ 1722.433950] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1722.435113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1722.436479] ? addrconf_dad_run+0x180/0x180 [ 1722.437609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1722.438983] addrconf_notify+0x161/0x2390 [ 1722.440064] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1722.441514] ? tun_device_event+0x71/0x1160 [ 1722.442437] ? mark_held_locks+0x9e/0xe0 [ 1722.443310] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1722.444421] ? inet6_ifinfo_notify+0x150/0x150 [ 1722.445409] ? failover_register+0x530/0x530 [ 1722.446363] raw_notifier_call_chain+0xb3/0x110 [ 1722.447366] call_netdevice_notifiers_info+0xba/0x130 [ 1722.448458] __dev_notify_flags+0x1de/0x2c0 [ 1722.449396] ? dev_change_name+0x6b0/0x6b0 [ 1722.450304] ? __dev_change_flags+0x4cf/0x6e0 [ 1722.451264] ? dev_set_allmulti+0x30/0x30 [ 1722.452162] ? lock_acquire+0x197/0x470 [ 1722.453018] ? full_name_hash+0xb5/0xf0 [ 1722.453874] dev_change_flags+0x100/0x160 [ 1722.454762] dev_ifsioc+0x5b9/0xa00 [ 1722.455522] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1722.456645] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1722.457788] dev_ioctl+0x23c/0xd30 [ 1722.458551] sock_do_ioctl+0x17d/0x300 [ 1722.459389] ? compat_ifr_data_ioctl+0x180/0x180 [ 1722.460417] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1722.461652] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1722.462742] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1722.463859] ? generic_block_fiemap+0x60/0x60 [ 1722.464809] ? lock_downgrade+0x6d0/0x6d0 [ 1722.465710] sock_ioctl+0x3ef/0x710 [ 1722.466479] ? dlci_ioctl_set+0x30/0x30 [ 1722.467325] ? selinux_file_ioctl+0xb6/0x270 [ 1722.468264] ? dlci_ioctl_set+0x30/0x30 [ 1722.469122] __x64_sys_ioctl+0x19a/0x210 [ 1722.469992] do_syscall_64+0x33/0x40 [ 1722.470794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.471882] RIP: 0033:0x7fbed20b4b19 [ 1722.472680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.476555] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.478204] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1722.479714] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1722.481253] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.482787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.484306] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1722.491410] FAULT_INJECTION: forcing a failure. [ 1722.491410] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.494266] CPU: 0 PID: 9782 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1722.495809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.497704] Call Trace: [ 1722.498308] dump_stack+0x107/0x167 [ 1722.499131] should_fail.cold+0x5/0xa [ 1722.499997] ? create_object.isra.0+0x3a/0xa20 [ 1722.501050] should_failslab+0x5/0x20 [ 1722.501912] kmem_cache_alloc+0x5b/0x310 [ 1722.502832] create_object.isra.0+0x3a/0xa20 [ 1722.503825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1722.504993] kmem_cache_alloc_node+0x169/0x330 [ 1722.506035] __alloc_skb+0x6d/0x5b0 [ 1722.506875] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1722.507912] rtmsg_ifinfo+0x83/0x120 [ 1722.508758] __dev_notify_flags+0x22a/0x2c0 [ 1722.509758] ? dev_change_name+0x6b0/0x6b0 [ 1722.510728] ? __dev_change_flags+0x4cf/0x6e0 [ 1722.511744] ? dev_set_allmulti+0x30/0x30 [ 1722.512685] ? full_name_hash+0xb5/0xf0 [ 1722.513598] dev_change_flags+0x100/0x160 [ 1722.514544] dev_ifsioc+0x5b9/0xa00 [ 1722.515373] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1722.516554] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1722.517757] dev_ioctl+0x23c/0xd30 [ 1722.518561] sock_do_ioctl+0x17d/0x300 [ 1722.519440] ? compat_ifr_data_ioctl+0x180/0x180 [ 1722.520512] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1722.521817] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1722.522995] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1722.524180] ? generic_block_fiemap+0x60/0x60 [ 1722.525198] ? lock_downgrade+0x6d0/0x6d0 [ 1722.526143] sock_ioctl+0x3ef/0x710 [ 1722.526962] ? dlci_ioctl_set+0x30/0x30 [ 1722.527871] ? selinux_file_ioctl+0xb6/0x270 [ 1722.528867] ? dlci_ioctl_set+0x30/0x30 [ 1722.529781] __x64_sys_ioctl+0x19a/0x210 [ 1722.530715] do_syscall_64+0x33/0x40 [ 1722.531561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.532728] RIP: 0033:0x7fe192ab9b19 [ 1722.533579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.537715] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.539430] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1722.541047] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1722.542655] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.544264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.545893] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:24:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7f510100, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8904, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1722.705860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=9785 comm=syz-executor.2 22:24:03 executing program 1: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000003000000000000006c6530006d80ff86e9910c53b0ee001a4185a4c5a1afb4d594f278debcfe84821090265af05b768b300fc7c3d5fe71327488337b47d66943b32ab524ddb66a53d2fae4c2fe388d47d1df663ad67c72676e08d3cae4beb9f4c1d37f0e8d0b013a40c4710cdfbd9f574f6d694e1e38326393bc0d6d5bb216f9977af7ae6e08ca717e6bd65a80f3663378a985505ac9dad1dd343bb0c20ece79ed75a45477ba0a1269e65b4719f699b4b1e48cd934f7d16580d9b1daa3d5ce33"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=""/98, 0x62}, 0x0, 0x162, 0x1, {0x1}}, 0x6) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x40000}, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="58e4114b01d10f2272ffffd38f74fa93dbb04186d1ccaf986e338900942e57ab1b014d03c85b9722b156515e7fc56358e55f7ec146e10f6e4a7404609d8831780848a4d7d3c8e28667ab41cd7fa5fc394963084871ac3af039e14d390ed2dd7af96f", @ANYRES32, @ANYRES32]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001000010000000000000006000000090005000000000000000500008048000000b754a817d2e956daf19762ee12b0534e7ae64e55997540515a817d61093fbb44c279f75d202ab189046cab47dc"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000340)=ANY=[@ANYBLOB="0a07e62f119c470262f9d4ffc71a73e00cfb5239f911a78ddf76cbd94b1fb5ba7febec3422fbe702cd5acbd6c16329c4ee10ad44b07512"], 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, 0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) socketpair(0x2c, 0x3, 0x1, &(0x7f00000002c0)) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 22:24:03 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8904, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000040)="7902dd8ecded721a362efda8cdc16057f9138f4b82", 0x15) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000100)={0x0, 0x100}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 22:24:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1722.848204] FAULT_INJECTION: forcing a failure. [ 1722.848204] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.850960] CPU: 0 PID: 9811 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1722.852525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.854454] Call Trace: [ 1722.855062] dump_stack+0x107/0x167 [ 1722.855917] should_fail.cold+0x5/0xa [ 1722.856806] should_failslab+0x5/0x20 [ 1722.857709] __kmalloc_node_track_caller+0x74/0x3b0 [ 1722.858857] ? inet6_rt_notify+0xed/0x2a0 [ 1722.859824] __alloc_skb+0xb1/0x5b0 [ 1722.860679] inet6_rt_notify+0xed/0x2a0 [ 1722.861614] fib6_del+0xf4c/0x1540 [ 1722.862472] ? fib6_locate+0x660/0x660 [ 1722.863396] ? fib6_ifdown+0xca/0x8f0 [ 1722.864295] fib6_clean_node+0x39e/0x570 [ 1722.865245] ? fib6_del+0x1540/0x1540 [ 1722.866132] ? fib6_clean_tree+0x14c/0x260 [ 1722.867127] fib6_walk_continue+0x35c/0x710 [ 1722.868051] ? trace_hardirqs_on+0x5b/0x180 [ 1722.868951] fib6_clean_tree+0x154/0x260 [ 1722.869789] ? fib6_ifup+0x2a0/0x2a0 [ 1722.870561] ? fib6_info_destroy_rcu+0x210/0x210 [ 1722.871560] ? fib6_del+0x1540/0x1540 [ 1722.872354] ? fib6_ifup+0x2a0/0x2a0 [ 1722.873134] ? spin_bug+0x100/0x100 [ 1722.873895] ? fib6_ifup+0x2a0/0x2a0 [ 1722.874662] __fib6_clean_all+0xf0/0x2a0 [ 1722.875516] rt6_disable_ip+0x4e9/0x5d0 [ 1722.876336] ? lock_chain_count+0x20/0x20 [ 1722.877222] ? rt6_sync_down_dev+0x160/0x160 [ 1722.878149] ? __lock_acquire+0x1657/0x5b00 [ 1722.879059] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1722.880057] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1722.881187] ? addrconf_dad_run+0x180/0x180 [ 1722.882079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1722.883191] addrconf_notify+0x161/0x2390 [ 1722.884053] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1722.885246] ? tun_device_event+0x71/0x1160 [ 1722.886143] ? mark_held_locks+0x9e/0xe0 [ 1722.886989] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1722.888076] ? inet6_ifinfo_notify+0x150/0x150 [ 1722.889165] ? failover_register+0x530/0x530 [ 1722.890094] raw_notifier_call_chain+0xb3/0x110 [ 1722.891069] call_netdevice_notifiers_info+0xba/0x130 [ 1722.892136] __dev_notify_flags+0x1de/0x2c0 [ 1722.893042] ? dev_change_name+0x6b0/0x6b0 [ 1722.893904] ? __dev_change_flags+0x4cf/0x6e0 [ 1722.894828] ? dev_set_allmulti+0x30/0x30 [ 1722.895689] ? lock_acquire+0x197/0x470 [ 1722.896526] ? full_name_hash+0xb5/0xf0 [ 1722.897363] dev_change_flags+0x100/0x160 [ 1722.898234] dev_ifsioc+0x5b9/0xa00 [ 1722.898989] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1722.900069] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1722.901177] dev_ioctl+0x23c/0xd30 [ 1722.901912] sock_do_ioctl+0x17d/0x300 [ 1722.902716] ? compat_ifr_data_ioctl+0x180/0x180 [ 1722.903704] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1722.904905] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1722.905983] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1722.907070] ? generic_block_fiemap+0x60/0x60 [ 1722.907987] ? lock_downgrade+0x6d0/0x6d0 [ 1722.908852] sock_ioctl+0x3ef/0x710 [ 1722.909622] ? dlci_ioctl_set+0x30/0x30 [ 1722.910452] ? selinux_file_ioctl+0xb6/0x270 [ 1722.911372] ? dlci_ioctl_set+0x30/0x30 [ 1722.912197] __x64_sys_ioctl+0x19a/0x210 [ 1722.913046] do_syscall_64+0x33/0x40 [ 1722.913821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.914893] RIP: 0033:0x7fbed20b4b19 [ 1722.915668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.919502] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.921115] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1722.922585] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1722.924058] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.925548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.927035] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1722.930898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:24:03 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1723.036319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.038078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.039723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:24:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:03 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:03 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001b80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="9a5eff91ad04047dc072df0b1daee6e7286bb403decfe8f40f0000000000000000", @ANYRESHEX=0x0, @ANYBLOB="2cf06a6e6f646f74732c646c74732c00"]) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8010) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x12) 22:24:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8906, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1723.329722] FAULT_INJECTION: forcing a failure. [ 1723.329722] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.332430] CPU: 0 PID: 9849 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1723.333905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1723.335657] Call Trace: [ 1723.336220] dump_stack+0x107/0x167 [ 1723.337005] should_fail.cold+0x5/0xa [ 1723.337817] should_failslab+0x5/0x20 [ 1723.338615] __kmalloc_node_track_caller+0x74/0x3b0 [ 1723.339668] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1723.340665] __alloc_skb+0xb1/0x5b0 [ 1723.341443] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1723.342406] rtmsg_ifinfo+0x83/0x120 [ 1723.343189] __dev_notify_flags+0x22a/0x2c0 [ 1723.344093] ? dev_change_name+0x6b0/0x6b0 [ 1723.344989] ? __dev_change_flags+0x4cf/0x6e0 [ 1723.345932] ? dev_set_allmulti+0x30/0x30 [ 1723.346805] ? lock_acquire+0x197/0x470 [ 1723.347640] ? full_name_hash+0xb5/0xf0 [ 1723.348478] dev_change_flags+0x100/0x160 [ 1723.349357] dev_ifsioc+0x5b9/0xa00 [ 1723.350124] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1723.351225] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1723.352335] dev_ioctl+0x23c/0xd30 [ 1723.353102] sock_do_ioctl+0x17d/0x300 [ 1723.353918] ? compat_ifr_data_ioctl+0x180/0x180 [ 1723.354917] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1723.356125] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1723.357217] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1723.358312] ? generic_block_fiemap+0x60/0x60 [ 1723.359257] ? lock_downgrade+0x6d0/0x6d0 [ 1723.360136] sock_ioctl+0x3ef/0x710 [ 1723.360911] ? dlci_ioctl_set+0x30/0x30 [ 1723.361758] ? selinux_file_ioctl+0xb6/0x270 [ 1723.362692] ? dlci_ioctl_set+0x30/0x30 [ 1723.363532] __x64_sys_ioctl+0x19a/0x210 [ 1723.364389] do_syscall_64+0x33/0x40 [ 1723.365180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1723.366010] FAT-fs (loop2): Unrecognized mount option "š^ÿ‘­}Àrß ®æç(k´ÞÏèô" or missing value [ 1723.366254] RIP: 0033:0x7fe192ab9b19 [ 1723.366271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.366288] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.373879] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1723.375374] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1723.376865] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.378366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.379863] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1723.455645] FAT-fs (loop2): Unrecognized mount option "š^ÿ‘­}Àrß ®æç(k´ÞÏèô" or missing value 22:24:16 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 11) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r1 = fork() perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x0, 0x45cc, 0x6, 0x6, 0x0, 0x7ff, 0x42, 0x0, 0x6, 0x0, 0x2}, r1, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file1\x00', 0x1) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) name_to_handle_at(r4, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000000000400"/24], &(0x7f0000000380), 0x400) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x80000000, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="747261f0599a97c03d0feca3b67301", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,nodevmap,euid=', @ANYRESDEC=r6, @ANYBLOB=',obj_user=@{}/,/),euid>', @ANYRESDEC=0xee00, @ANYBLOB=',dont_measure,smackfsdef=,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',defcontext=unconfined_u,\x00']) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) sendmmsg$inet(r2, &(0x7f0000003680)=[{{&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000540)="ae71d90ae6e1cd7c6a3a292c4ae129182de67c2422bc458b68b091a955da23216f8c352488c0244427e0e19faf", 0x2d}, {&(0x7f0000000700)="e701442abb7e4b78a572cc7d5836c9918f3f202884cae1282de0c9de7925e992f268482ebc92d97ede72dfe7d14e20f50eb3094144f8c9913eda4d3e66cd0f5c5b2b5f9e6b5348973aed3a020411cf11616fdc4ed2a0e35282f16468914bc54552959cd87c1b0aeb55254172a4e3bfe55792c05914d4aa221bc1f156401655252e6de3bb3dc9436cf7ed65807b9147c80c8be217a719f79ba777df40965400db168472590f", 0xa5}, {&(0x7f00000007c0)="7c5c0f3e4161866cea24cd918912577661e225e03c71410a5a2d327868e66ab05e439111527ace2aebac8004eb71e6a50aef488d54b8de864d042848f246ab34a7f964959025a487e261b1c4700f475d1d7abe254f3c4e1c5d0d426749c19227b43e73163cc75ca0e9d95ba9afd0b9b42d21e3f4e71506030f0f2ff9a097636d2e56a4092d23c507426c3999f316ff981e6f302dfe9240bb8d71011cc7106abcbca8ba4ce94b2dfef8f4cfe9177b508985dfc3968ffa88f018c9244fad9a", 0xbe}, {&(0x7f0000002940)="c013af8d13564f255bd81d55def0fa6f2f5b2d59eab253b066afcb71f32fea7e7465038cea0bcd7ebda6b028825e4fff8ee39ebae819edfb91106dc74892f7ec8c2a43d60194616b31c4c93bed0e11cc8b224fc13f44b3597583bfa2fab47d3e14cb18733283a40c7d1e429b21e52d68e0b0ca693f56e6c42ed66b99c8f2e4aaf4fe9a2123034b00a9f7a099bc79a05f8972c183991b5c9bdf87cc7dc1974421bb4ea75ba292af6732c4d0c62199f345a11ca67e16bc32f42bb369e3a684", 0xbe}, {&(0x7f0000000580)="56c72fc243b475e81916da6d13cea85882eeeb573cf2edbe915c5638a26748af18860722b4b048c29589dcec54929c9d4869d969f114003d1f8a6763f3f6fb525d1ccd588c183039f2a91a8ec2709e889f8cd576a548b76d8994af2e5cce6c4e162c7b7ae0c007baa7f3c33b856ec5cbb3cbd09b", 0x74}, {&(0x7f0000003140)="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", 0x109}], 0x7, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x18}}, {{&(0x7f0000002b80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002bc0)="55fb9f7700d01fe33779134481278c7d506859d4fb0183cfe5eb6c41ce255e20d43f4793923b57b0e6d4d603f4e4418cc3379b45a433f6f63a96d66fb8a062de6a2e8d6afe6c1a14769e03f482140dc51788512687cd0b9682836a4a943b3ef4325847821ebe89f467bd5e7c0527120b9353770df15e10bd9d41b96bfcdc464e9c5f3ad7e6a11daf773206d6", 0x8c}, {&(0x7f0000002c80)="67cdaef583c48022ce82594939b13ecac8d52601443bce71ac30eb7afedb6b01c303e1b67b30ae300a5606a643825cf001e46358aaedb6329bee68fe05a1c6cb75dff7b4956fa776077489d18441750d00534ca54949317d24ed8c6ba6464d5db54d150f2b56228337736d7e30c892b35c59bf94de60e9f10608119b7c7a522fd6804bf6f1d51c9e786f50a94c372a421b40c006e17488d6f9752da3dacb62d58d7ca3ab96aabfb7d191a7dc90aae8a87d1131fc67f87003923ca08fb4cac9a4d3f8026bc7fbe61ba4", 0xc9}, {&(0x7f0000002d80)="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", 0xfc}], 0x3, &(0x7f0000002ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000002f00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002f40)="61e272", 0x3}], 0x1, &(0x7f0000002fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003000)="96d8dff007f75d8d2a7e97c4a938da6ff4c76febbe0b48063752536ae479745326746dbcce27c229f97ce41d8c924dc4f0f1c837e7bdf77aac946a8b4e422e95e3593a10b2710a81f7de2a730af95b2778640e70afdf1c34fdaf810eb380d07b0c4fb1e26cfe53ffa76f44b6f2811ab8e9a9de9a3df3ad8016a8baa3535080a90976f87d0abc752b0cbcdc018727c431c83cdf1dc9ae654ba9c186c80d7e5bc58008900de9a0be30be8d48a236d37dae21c2fba690b87e8dcabf0cbe7bd17bf16526fee30328e33ffd5a996423366b95f7f3e1842ea278", 0xd7}], 0x1, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x6, [{@broadcast, 0x4}, {@multicast1, 0x6}, {@loopback, 0x8000}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x61, 0x1, 0x8, [{@empty, 0x5}, {@multicast2, 0x9}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x2, 0xf, "11c05cbe58fb0277aa9cc169d6"}, {0x6, 0xa, "13059554bb710eb6"}, {0x0, 0x12, "bdb9f1966b79b8bc9461bcaf2559a1e7"}, {0x5, 0xb, "ab3730de2fac63561c"}, {0x0, 0x3, "ca"}, {0x5, 0x10, "9b0470570213a9c26447e8eb0218"}]}, @lsrr={0x83, 0x1b, 0x71, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xa}, @empty]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0xe, [{@empty, 0x40000000}]}, @timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x3}, {@remote, 0x62}, {@empty, 0x200}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x400}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4, 0x201}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "1614ed9675f40e118d9ed1f31d"}]}, @timestamp={0x44, 0x20, 0x90, 0x0, 0x4, [0xe0, 0x8, 0x2, 0xda2a, 0x3ff, 0x1, 0x0]}, @lsrr={0x83, 0x13, 0x2a, [@private=0xa010100, @private=0xa010100, @broadcast, @local]}, @noop, @ssrr={0x89, 0x1f, 0x65, [@rand_addr=0x64010101, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x17, 0x59, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @loopback]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x240}}], 0x4, 0x24040040) r7 = mq_open(&(0x7f0000000440)=')\x00', 0x40, 0x2, &(0x7f0000000500)={0x2, 0x1ff, 0xfffffffffffffffb, 0x2}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000940)={{r7}, "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"}) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8800000) 22:24:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nfs4\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002800)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000002900)=0xe8) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2000, @fd_index=0x4, 0x6, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0x4de0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="060e088802344589834714a35da9dfae39031ca7c66edeba91ae6dbf1e18172b0f84420a2b999ddc1046212288c37e2f5dd8df296f0488f729ae0330fa1423a75bd0dde51d67669adbd16bde7da3b789ed800c67ad0aec896941d8c10a3025a13d167f22226506ff43a5858b2210324643df1633dc57d354eb280690c53c91daddbf9e9d0be44904376c888d8a1ce0ab997b918894c80a04c879e761cc7bd1001c38806a1d627c2bea732f4454ce05b4945e636f9a010cf868a6e70e846ee42237f69143ead699abb7faaf8732045a283654d1c878b27b4459f2b9258faf67d0c004dbfc7b7484905706277826d260788c8891cee7ba8aa3405e23b40a0789d5312a5dd320cc624777c82fa5d9c25c656ea50eb367bd5be8866a4e07a0b7bc3819c304def1137b4f224f7b379fd48bac4d14249e708b8c7dc5aabc739de6b676efa22f4a511b763085aeef21a73c146c10f1f109dd42ea1273c6e6151b3d08cc0fc1c6ebe8c0adf89daf2eb03e22a06cb9054c2755c4e4e4d4f4ca0dd163cc9b790c4101e13549913ca180832ac13ba0e159e77b1ce38a7f8eb3dda2c6c273ce4327f7d6af21c631f326b40cec77d94dcaba7ff45c06b1b19ae654f8e5c95ff9e4b81a505a7d1114e1accef2e44233e28d47a46ecbf163b3f6e6eb176695d969de8119e997fac30fc2ccab1c846cbf1241cb4cff1c41e4a7b1077ea784f0baaa2146085d2fefc4afd3a309a617901e7174e5811929555463cbfa4fde7bc509f50168ec2840829b45685aa23bde17a88ce35f3043d39f82d9f5bf6a9a7931446a3af5e8cca96bd8f7ce96034296bafaceb8187aadedcff78c680a198ed386001b7b187af43d22cb6d59876a44bffaec41cf2c698c59c67a3fa60a6e4dc8564eaff1fb0f77c1f2a1f42bf51753d0509329735836b105692d723f40d27b984e699770bf3e05e3827e6550f9915a467d4b604f508fa4e09bab3073cce8bf3c1119166349dda2596205f5571f727608170fa3d9faecf6a72dd1fd3ce73c942f751c10a12ce4b05215f69b207f737534474073e47009aeb1a2ff8b88a92d7897566ddc4ac1366961986dcf1ae04bd2758aa44e0885b5a25f3be82c56bab28d14fcb2566706296befc2000b5e7a8282e2d6ed404ad23065dabcc7f537228032ea46e76890bf5bacb7572fdadf1d37916cdaaad1f3ccc3cf87340f1956f14a0e4a1f902cf815eb9a7a4f176e5597b0f35030eb6ec189cbe1b2980a52d7a78f0bfc7b330505d30a5aa0d4169d8e21420d2153029bc4169a80034e6f669fe768b43986c682cba3a287cc7c9ab3202e6279b8adbb798862c81b47cd94f12c370fad984e495b22163b77648e9348dfa27d26e1dd7ed21cb07133673e47d9ea212d44d9d5b389b01afccd2cf0be0e9ebd6a67566a15fe6989a70194dc95844efe213a38a715849adb46b9d078d3f3b23db61af071a33797c9b6936f134a07b66fd9319cd584890622d50f207050c9d824ad96d047de409e0c74f55d5376f7f14a92e817bc3fccc164bcc8609dcb89c1e33f049faa582934dcbf78ee9cfee1e15dc4bc812684cc17fc2af2be4be3e2bc5f97629f699105117a2e14f0ceb3e268a5762bb85a26edd6adb20c634ede73ac7ae26d23a40816653516def923ad0b5cf9bbbb3f66be3d90ace343ecdb453efca32aff6f34557f9b46508f57c40902bd39bd3600b8c836920257063e123bee78977ccea8848f19878ba2953ddfce3a524def457c2f8c70ce2c283225083273cf0174fd946dfe27e1e6cb02375962fd4e703803b6bf0186bea88e8a841242e67ee05968b7840865d42a8027547ba846bf9afcf32b09880781756c10f57408a22728e5e248ac785d83f3197c3cf26d8cb115b9dc0bec587f6c83bcc70b53ee977665bfc62f582f243ccb136e6a5f295433ee5cd75b0c86a2eb6b4520115b6b19c12c30394626748c51cc9e892ea678399d6eedac5e52bff80b3be51ed7f1d9115ceb275902a69b71c006128dc82a4316962cadcdb30a0d98d6c1e2ce3629fd8c28948a2896e937b209547c6a77fbf49c2f47b2751e00604d9486e0cbdf6e325e9a6d2d0e66eb2689c05de40a9e4864139508a2784adb8a94ec92e54369547c5c5b955b11997fcb518768ac2b81956fd25a38b5ae845aefcaca846d987ed10d832cb0eaf1b071398ae986c4d55719036e1e8d8df1b601df2a7b10a1e4b5e7c388e93cc0ded0aadca4b7f2a8d34e3d4ef2c3546dbfb7fc35287780c0456dfb000c491c7d0f4621ebc208148450a4a1d83c95989ff86d44ddca008284e3e63e52dc91ea084c48fe431d6ca1feb4345b6222899b5dcc0fcaaf7bae27dbbff97e70515e4b05bdf43c925e04803142714ee9cb5befd33f1542725cd67ccf732b94b405f9d6314c770c3341749539d06a350bdeeaed500c4f1ab54eae34473ab55bdeb1fbc7a951deaf0572c8c39bd19a92519b031099e5688dd9fd37726947587cbc118d7875c61d52f2efca0370df66175fd95617519b7857bc5cfd6aac9906c7d36c75853725e3d9d98b101b13c55c87d3cabde9e6eaa978a7cb8d408d02e892077c059a5c3676451b67b51ea5dfc4832116d6d8823d0e5d1baad1df25cddc81b01df33851012cb623160e4382f79fd0f94f7d821f33ce47a7a96a979e0962e687561dee00577c75aab2f480a9d85e8f8512768edd3455d106c493d8b2f4293dfd8a4b6e7da6788728336fc7a418b1660b2166172710aa4cbcffe1c0473c965fe55f301bb502974566ae27e9eb39d255e9e8f455ad8c58feae1facbab64a2bd64fcc0b1a269732c4a6071b4dbd75e12e947c20e97307a49ea811aeade173c274a3ae872b6a9b8b03fe99044aff32729c92523e3b4529d02aeac9b0acd1a70964a4886de140e784af09c6b07ad42494fb6303b327fa562544276e11f1e7f2348fe66e38eaf74dd6d0026828714a2b4b4ca59d84a813a61100da07f99b610f3341e07dab31ea1bbcd9aea3137d0ba6624b530b56a9e7d65c1c80ee9a7cdc01c9ac5326ff6773cfa407d290302f6cf6226654a6e4abe0b6585c9f25c296655fc022176e4e376caddf3176beb73bab00317730c1deb82d35a3adb0a0b32f0d1113b273553de3276e32950ec5146511ecde6e9c7af8d013224775106731acccd27824317ad2fda2f68b9c1c1ac1ab6eeba68ef8d86868e73662e140552ef60cb6f4517ff3c725a6684437fcac92dff053c1ab3fff9d5a6a80ddfe60d516d3bd2bc727a18c286f87bc35046b5f5fea7c3cdc14438e75beed8f013afeb7faf7b48a7f73ac5fcb5d79d9062bb7ef31adc28185852be97ed2d060daafce39da92b8a3a8075e3315fa6e30f904f0a40b6a7bc827931a3695fdcd62737936ac0dc016116e36b8c8908dcecaaf35a79109ae4138889c771010e6521d484cd25fd1bd3255892ae35a4040e156fc74c3554368762ae3e239ed47d1747a0afbdc479ddc088782e29523f930b95aebc7c3bfe33527ade10d01f0d75c16f5b6d93e795cb26f74d266c5ba69f9279098f12705e8db852b61fd36a709af32f7c79260aff2739f9728a3184347e50f5fbd8a14af1dd20fbe1d0072e60aef3650b40036dd6dd91c86b3a70b701a525d02c644ac88be010d8f80b00f95e2d5fce0bae42318191634a8122ce14ea99c552053a8411905b86d95b913efcd483f651d77ae3c659d132185f62834b214e96e5c64d948d284dac42b3f3b599c6e5a243f5ae4cda151dd11852dcb1b8817d5e452127d40e626e2e4ab0dd13a6cf08ae3f40ed7a4b982f1a175c86e0bb0fb083328ed4bb4fbd01be97da12fc7670253e7f357d77cbcf1a578a96bc35fe51f31ec3154b89eefc5a8836bd3d5edebcde10615766bb55e3bc036f059343301574b2cbbfd886a6fa9c9a991da270ca9654ab080ed3817ea9c4e3a454d796c85df755d11283d5018ea9e73d10f5864f7fb751ab20d6e2ac8de2be323709055b0c9315d68e5c3c54a437ec6faf5502203402e75a577d6acdd348bd385b4b12be29284cc887cd6ffe4c38801da360a044ab790d2b80293fe7010116e62e73807b7f2eea7a954745acf448d67e2303628d10c7f694c5ac5ae5fa541058c52e1c8810cf6175a43c6432d8bce19ee9a705a90460565e68c10353adedb6d631fba3105c96963ea1fc6c7d666457226fbf3588a82cb680ed8bc858e8d89bf92840062dd627084e0f8487b87276d6d9f3d86faf4e2ed9360ab8a65acafdbbaf1a28c9e7d799cabb64b1dfdbf0c7df9bf8dd04543e7a9687507d0e73b2cdb1e32bcbe814cea46a1acf4b08e5a5212781e278667b35654f0670d0585eef4f326f5b3a47c5e27b5cf0579d12d0efd06d8c53072812d0de0271442243d22fdb2f29860ba0a8bfc68be0e979edc95b8b9b63583ea593492c57b941add85f158631f2a7e4f4e4c2fc7f0904217421c421fcf8c625a1e12a7283f5baa8b52c7a961131a893ba642246a812f91064d6d60b3d1863c6277aa5709d6d13e67de5d43c0762b1b7cbe042c9c25b88ece2a3af24c7026770e8779442e86db985c2b64e987ca694f2fa56d73f127cde7218e096952b4fecdde9dd13786afdec4c5e9cc6539f29b6b580f12cac63fa5ddeb718b8f9387c7c3dcf88f085d90ba8eefd67fb0adf3c12e9881414c1ad256c0bbccb8571558c061842684a0d13af983706d7f00cbbce4e2876b87e443854520abf44a96785ffacba0904a3f2eca45712f2f69ce34f731fa6473d878399c259cac93e6eba744cdc06c6370d6ace8ac46ae8878e3f3ff04afef7038aaefd6a4d26af57090cb342f82e34649c14a79fdfe6cdf21472642401db70ae8440490251f70d695466f5b086aab3fe7719a0ff8063de481f83438853768440a2f249252a83d4ca2e5449bad3620c67694ff55274c8d3e3b4b61ae585f7ec67968ebd8db4ff32b70f1506afa9f7701b2ecdc3d81929680344b6fde07e09660aac74ee0f3a508f3759b7e278d0bc6e956182facccb612254f66fcf7a682f4e2c1f86c47b08055c53dc523d3efb48622040cb528aa12454a594216a7ddc0c46188f424b13241fff894ed6e6bf96adc7c4d7478a330d08558a426516a01866a1e09e6ebe416636eee3be7c7f384023fa75a82e1afa3f684e7c0c109da018b42b94eb67759dc5cd409db8a5b11268b16a2c68c9b56e3a95758ea63b7c1e8d4ff416efe9050f3ce2c7bdc271feb73b29ee517c96b18d24a5c92d3483908bcc375373c4f2fa8a696e2d29c3bae69bb70919dd7cfabb8ad2f2e2fa405056e19fd846cf53d858f973f8fa9815a1bee11b27e906da2a7478366a1bbd4d1056bf43646b9261d6e0cce88e003e0e71cf51b6a5741b8b39d201e5b8465363511aa4209caca16f33ee83b9ae14d189bd7236eb5096e26f07f47df0dacb9afc58f8c221e5af496f5348210cba04fb4acf71575bb5d95990ea40376f82bcc5dcde009d7517aef4614b31e801b4110e738ad192ede7ef9266777a6730539ee9fe9da89211d8480f37555376f5fc23d3fd619c93c85b1c6591ff170dd4dca5409a64640f3aef79d870912e0768f9ea1ef62c2b18d896449819cc9d5c222fe9549111e51e5d725775d516591b57fde427d7b8d07c82926e50de938dcee551f5ab58f3bb319aae0c948c6a6508a18249ec0703a34f1fc43ce2d40b7838d041eb0f1a79d5b0cc9bd66d47232cd66f33c3701442c0ed5a0762e2ac02d66120c6c62fb151fa12d84af6270dc46efc95ca7264a7bd0bfe163cf405f15486634c8d91c98", 0x1000, 0xa5b}], 0x2, &(0x7f0000002940)={[{@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_win95}], [{@fowner_lt}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '&^::'}}, {@uid_lt={'uid<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, 'nfs4\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) 22:24:16 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 5) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:16 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfbffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:16 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8907, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:16 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:16 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1736.301414] FAULT_INJECTION: forcing a failure. [ 1736.301414] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.304648] CPU: 0 PID: 9869 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1736.306396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.308485] Call Trace: [ 1736.309165] dump_stack+0x107/0x167 [ 1736.310087] should_fail.cold+0x5/0xa [ 1736.311051] ? create_object.isra.0+0x3a/0xa20 [ 1736.312224] should_failslab+0x5/0x20 [ 1736.313197] kmem_cache_alloc+0x5b/0x310 [ 1736.314231] create_object.isra.0+0x3a/0xa20 [ 1736.315334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.316627] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1736.317916] ? inet6_rt_notify+0xed/0x2a0 [ 1736.318967] __alloc_skb+0xb1/0x5b0 [ 1736.319892] inet6_rt_notify+0xed/0x2a0 [ 1736.320896] fib6_del+0xf4c/0x1540 [ 1736.321799] ? fib6_locate+0x660/0x660 [ 1736.322671] ? fib6_ifdown+0xca/0x8f0 [ 1736.323531] fib6_clean_node+0x39e/0x570 [ 1736.324445] ? fib6_del+0x1540/0x1540 [ 1736.325312] ? fib6_clean_tree+0x14c/0x260 [ 1736.326270] fib6_walk_continue+0x35c/0x710 [ 1736.327238] ? trace_hardirqs_on+0x5b/0x180 [ 1736.328208] fib6_clean_tree+0x154/0x260 [ 1736.329117] ? fib6_ifup+0x2a0/0x2a0 [ 1736.329956] ? fib6_info_destroy_rcu+0x210/0x210 [ 1736.331027] ? fib6_del+0x1540/0x1540 [ 1736.331882] ? fib6_ifup+0x2a0/0x2a0 [ 1736.332712] ? spin_bug+0x100/0x100 [ 1736.333542] ? fib6_ifup+0x2a0/0x2a0 [ 1736.334373] __fib6_clean_all+0xf0/0x2a0 [ 1736.335289] rt6_disable_ip+0x4e9/0x5d0 [ 1736.336184] ? lock_chain_count+0x20/0x20 [ 1736.337130] ? rt6_sync_down_dev+0x160/0x160 [ 1736.338108] ? __lock_acquire+0x1657/0x5b00 [ 1736.339090] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1736.340149] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1736.341393] ? addrconf_dad_run+0x180/0x180 [ 1736.342356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.343551] addrconf_notify+0x161/0x2390 [ 1736.344489] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1736.345781] ? tun_device_event+0x71/0x1160 [ 1736.346749] ? mark_held_locks+0x9e/0xe0 [ 1736.347660] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1736.348817] ? inet6_ifinfo_notify+0x150/0x150 [ 1736.349845] ? failover_register+0x530/0x530 [ 1736.350850] raw_notifier_call_chain+0xb3/0x110 [ 1736.351908] call_netdevice_notifiers_info+0xba/0x130 [ 1736.353077] __dev_notify_flags+0x1de/0x2c0 [ 1736.354041] ? dev_change_name+0x6b0/0x6b0 [ 1736.354992] ? __dev_change_flags+0x4cf/0x6e0 [ 1736.355989] ? dev_set_allmulti+0x30/0x30 [ 1736.356915] ? lock_acquire+0x197/0x470 [ 1736.357809] ? full_name_hash+0xb5/0xf0 [ 1736.358703] dev_change_flags+0x100/0x160 [ 1736.359640] dev_ifsioc+0x5b9/0xa00 [ 1736.360459] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1736.361652] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1736.362834] dev_ioctl+0x23c/0xd30 [ 1736.363643] sock_do_ioctl+0x17d/0x300 [ 1736.364514] ? compat_ifr_data_ioctl+0x180/0x180 [ 1736.365597] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1736.366879] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1736.368037] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1736.369222] ? generic_block_fiemap+0x60/0x60 [ 1736.370222] ? lock_downgrade+0x6d0/0x6d0 [ 1736.371158] sock_ioctl+0x3ef/0x710 [ 1736.371974] ? dlci_ioctl_set+0x30/0x30 [ 1736.372869] ? selinux_file_ioctl+0xb6/0x270 [ 1736.373874] ? dlci_ioctl_set+0x30/0x30 [ 1736.374774] __x64_sys_ioctl+0x19a/0x210 [ 1736.375690] do_syscall_64+0x33/0x40 [ 1736.376523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.377686] RIP: 0033:0x7fbed20b4b19 [ 1736.378521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.382649] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.384355] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1736.385957] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1736.387568] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.389180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.390783] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1736.404811] FAULT_INJECTION: forcing a failure. [ 1736.404811] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.407610] CPU: 0 PID: 9872 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1736.409156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.411032] Call Trace: [ 1736.411629] dump_stack+0x107/0x167 [ 1736.412449] should_fail.cold+0x5/0xa [ 1736.413321] ? create_object.isra.0+0x3a/0xa20 [ 1736.414353] should_failslab+0x5/0x20 [ 1736.415221] kmem_cache_alloc+0x5b/0x310 [ 1736.416153] create_object.isra.0+0x3a/0xa20 [ 1736.417159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.418314] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1736.419464] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1736.420547] __alloc_skb+0xb1/0x5b0 [ 1736.421388] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1736.422429] rtmsg_ifinfo+0x83/0x120 [ 1736.423283] __dev_notify_flags+0x22a/0x2c0 [ 1736.424258] ? dev_change_name+0x6b0/0x6b0 [ 1736.425233] ? __dev_change_flags+0x4cf/0x6e0 [ 1736.426251] ? dev_set_allmulti+0x30/0x30 [ 1736.427192] ? mark_held_locks+0x9e/0xe0 [ 1736.428115] ? full_name_hash+0xb5/0xf0 [ 1736.429016] dev_change_flags+0x100/0x160 [ 1736.429966] dev_ifsioc+0x5b9/0xa00 [ 1736.430795] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1736.431980] ? do_raw_spin_unlock+0x4f/0x220 [ 1736.432983] dev_ioctl+0x23c/0xd30 [ 1736.433805] sock_do_ioctl+0x17d/0x300 [ 1736.434683] ? compat_ifr_data_ioctl+0x180/0x180 [ 1736.435760] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1736.437069] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1736.438241] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1736.439394] ? generic_block_fiemap+0x60/0x60 22:24:16 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xc28, &(0x7f0000000200)={0x0, 0xef39, 0x2c, 0x0, 0x3d1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) [ 1736.440424] ? lock_downgrade+0x6d0/0x6d0 [ 1736.441608] sock_ioctl+0x3ef/0x710 [ 1736.442438] ? dlci_ioctl_set+0x30/0x30 [ 1736.443330] ? selinux_file_ioctl+0xb6/0x270 [ 1736.444330] ? dlci_ioctl_set+0x30/0x30 [ 1736.445244] __x64_sys_ioctl+0x19a/0x210 [ 1736.446166] do_syscall_64+0x33/0x40 [ 1736.447007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.448158] RIP: 0033:0x7fe192ab9b19 [ 1736.448999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.453178] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.454881] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1736.456479] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1736.458090] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.459689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.461312] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1736.469161] loop2: detected capacity change from 0 to 6656 [ 1736.473297] FAT-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value 22:24:16 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 12) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:16 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890b, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 1736.532423] FAULT_INJECTION: forcing a failure. [ 1736.532423] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.533858] CPU: 1 PID: 9904 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1736.534622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.535545] Call Trace: [ 1736.535847] dump_stack+0x107/0x167 [ 1736.536261] should_fail.cold+0x5/0xa [ 1736.536692] ? __alloc_skb+0x6d/0x5b0 [ 1736.537128] should_failslab+0x5/0x20 [ 1736.537555] kmem_cache_alloc_node+0x55/0x330 [ 1736.538059] __alloc_skb+0x6d/0x5b0 [ 1736.538474] inet6_ifa_notify+0x11d/0x230 [ 1736.538935] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1736.539434] __ipv6_ifa_notify+0x180/0xaa0 [ 1736.539910] ? modify_prefix_route+0x530/0x530 [ 1736.540426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.541008] ? __local_bh_enable_ip+0x9d/0x100 [ 1736.541534] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1736.542068] ? addrconf_dad_run+0x180/0x180 [ 1736.542554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.543150] addrconf_notify+0x161/0x2390 [ 1736.543617] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1736.544252] ? tun_device_event+0x71/0x1160 [ 1736.544744] ? mark_held_locks+0x9e/0xe0 [ 1736.545210] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1736.545787] ? inet6_ifinfo_notify+0x150/0x150 [ 1736.546299] ? failover_register+0x530/0x530 [ 1736.546797] raw_notifier_call_chain+0xb3/0x110 [ 1736.547317] call_netdevice_notifiers_info+0xba/0x130 [ 1736.547894] __dev_notify_flags+0x1de/0x2c0 [ 1736.548371] ? dev_change_name+0x6b0/0x6b0 [ 1736.548840] ? __dev_change_flags+0x4cf/0x6e0 [ 1736.549351] ? dev_set_allmulti+0x30/0x30 [ 1736.549821] ? lock_acquire+0x197/0x470 [ 1736.550276] ? full_name_hash+0xb5/0xf0 [ 1736.550731] dev_change_flags+0x100/0x160 [ 1736.551204] dev_ifsioc+0x5b9/0xa00 [ 1736.551613] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1736.552189] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1736.552777] dev_ioctl+0x23c/0xd30 [ 1736.553182] sock_do_ioctl+0x17d/0x300 [ 1736.553617] ? compat_ifr_data_ioctl+0x180/0x180 [ 1736.554144] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1736.554786] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1736.555360] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1736.555950] ? generic_block_fiemap+0x60/0x60 [ 1736.556447] ? lock_downgrade+0x6d0/0x6d0 [ 1736.556909] sock_ioctl+0x3ef/0x710 [ 1736.557320] ? dlci_ioctl_set+0x30/0x30 [ 1736.557769] ? selinux_file_ioctl+0xb6/0x270 [ 1736.558261] ? dlci_ioctl_set+0x30/0x30 [ 1736.558706] __x64_sys_ioctl+0x19a/0x210 [ 1736.559163] do_syscall_64+0x33/0x40 [ 1736.559577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.560153] RIP: 0033:0x7fbed20b4b19 [ 1736.560561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.562604] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.563438] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1736.564219] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1736.565002] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.565796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.566581] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 22:24:17 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x688, 0xbb5c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xbde, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x80000001}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x60050, &(0x7f0000000240)=ANY=[@ANYBLOB="00935384f505038b0d421512f800"/29]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet6(r1, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0x2, 0x3, 0x8, 0x2}}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2, 0x8, 0x8}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x80000, 0x144) 22:24:17 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8910, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:17 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfeffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1736.642329] audit: type=1326 audit(1752013457.103:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.648098] audit: type=1326 audit(1752013457.103:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.668748] audit: type=1326 audit(1752013457.110:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.690895] audit: type=1326 audit(1752013457.110:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.708082] audit: type=1326 audit(1752013457.110:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.728426] audit: type=1326 audit(1752013457.115:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52f0b5bb19 code=0x7ffc0000 [ 1736.756665] audit: type=1326 audit(1752013457.115:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f52f0b5bad7 code=0x7ffc0000 [ 1736.777558] audit: type=1326 audit(1752013457.115:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f52f0b0eab7 code=0x7ffc0000 [ 1736.800785] audit: type=1326 audit(1752013457.116:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f52f0b0eab7 code=0x7ffc0000 [ 1736.821730] audit: type=1326 audit(1752013457.116:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9907 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f52f0b0eab7 code=0x7ffc0000 22:24:31 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 13) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:31 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f0000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:31 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:31 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8911, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:31 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:32 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x1fe) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x30, 0xffffffffffffff75, 0x10001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000981dd33a76f1d2328800001d93730018", @ANYRES32, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6362a03f8cf0c1e4402a16f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010bbac7dcfc349b9727a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c93079afa3e6e8c80f01000eba254f7d13aa0b68306d66"]) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520011cd0000000000000015000000006970b76bb791a60458f70d0adfc5a36f9db03793523160affa99820e"], 0x14}}, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/md_mod', 0x2001, 0x4) fstat(r3, &(0x7f0000000280)) 22:24:32 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890c, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r0, 0x0, &(0x7f0000000040)="a60227f73b999367cf6966b6468b16c06d34598a3898ed89ff10dcd62275e363231571c5a05dc507abddab67661c5cedbfaca50af72f144360095cf39ff7d186d1a0d85efb31d8d061bea2b73e436f301047bdf948ea1a5e973543d00d67eb8348d2ad8d9c8e2fd1b7688039410025d0976d051c63f4de992cea29c3e66697101af5aa8620ccc7a43b23591d8247401b9233c7751f5b2f9845e55cac33edf437628cbfcd87b3499e307a5b5bd0", 0xad, 0x40002023, 0x1, {0x0, r6}}, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x1, 0x0, 0x0, {0x0, r6}}, 0x5c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x81}, 0x1c) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f00000002c0)=0x5, 0x4) shutdown(r0, 0x0) [ 1751.563256] FAULT_INJECTION: forcing a failure. [ 1751.563256] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.565886] CPU: 0 PID: 9938 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1751.567330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.569071] Call Trace: [ 1751.569681] dump_stack+0x107/0x167 [ 1751.570566] should_fail.cold+0x5/0xa [ 1751.571497] should_failslab+0x5/0x20 [ 1751.572428] __kmalloc_node_track_caller+0x74/0x3b0 [ 1751.573653] ? netlink_trim+0x1ee/0x250 [ 1751.574633] pskb_expand_head+0x15a/0x1040 [ 1751.575674] netlink_trim+0x1ee/0x250 [ 1751.576611] netlink_broadcast_filtered+0x62/0xe00 [ 1751.577804] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1751.578966] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 1751.580120] nlmsg_notify+0x94/0x290 [ 1751.581041] rtmsg_ifinfo+0xf5/0x120 [ 1751.581960] __dev_notify_flags+0x22a/0x2c0 [ 1751.583006] ? dev_change_name+0x6b0/0x6b0 [ 1751.584030] ? __dev_change_flags+0x4cf/0x6e0 [ 1751.585123] ? dev_set_allmulti+0x30/0x30 [ 1751.586139] ? lock_acquire+0x197/0x470 [ 1751.587109] ? full_name_hash+0xb5/0xf0 [ 1751.588080] dev_change_flags+0x100/0x160 [ 1751.589095] dev_ifsioc+0x5b9/0xa00 [ 1751.589988] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1751.591256] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1751.592542] dev_ioctl+0x23c/0xd30 [ 1751.593418] sock_do_ioctl+0x17d/0x300 [ 1751.594365] ? compat_ifr_data_ioctl+0x180/0x180 [ 1751.595522] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1751.596912] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1751.598177] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1751.599443] ? generic_block_fiemap+0x60/0x60 [ 1751.600527] ? lock_downgrade+0x6d0/0x6d0 [ 1751.601538] sock_ioctl+0x3ef/0x710 [ 1751.602411] ? dlci_ioctl_set+0x30/0x30 [ 1751.603377] ? selinux_file_ioctl+0xb6/0x270 [ 1751.604435] ? dlci_ioctl_set+0x30/0x30 [ 1751.605401] __x64_sys_ioctl+0x19a/0x210 [ 1751.606381] do_syscall_64+0x33/0x40 [ 1751.607310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1751.608567] RIP: 0033:0x7fe192ab9b19 [ 1751.609482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.613937] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.615798] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1751.617531] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1751.619246] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.620948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:24:32 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1751.622661] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1751.641729] FAULT_INJECTION: forcing a failure. [ 1751.641729] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.644362] CPU: 1 PID: 9935 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1751.645838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.647594] Call Trace: [ 1751.648156] dump_stack+0x107/0x167 [ 1751.648932] should_fail.cold+0x5/0xa [ 1751.649745] ? create_object.isra.0+0x3a/0xa20 [ 1751.650709] should_failslab+0x5/0x20 [ 1751.651512] kmem_cache_alloc+0x5b/0x310 [ 1751.652381] create_object.isra.0+0x3a/0xa20 [ 1751.653319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1751.654404] kmem_cache_alloc_node+0x169/0x330 [ 1751.655387] __alloc_skb+0x6d/0x5b0 [ 1751.656166] inet6_ifa_notify+0x11d/0x230 [ 1751.657051] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1751.658009] __ipv6_ifa_notify+0x180/0xaa0 [ 1751.658900] ? modify_prefix_route+0x530/0x530 [ 1751.659868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.660978] ? __local_bh_enable_ip+0x9d/0x100 [ 1751.661957] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1751.662981] ? addrconf_dad_run+0x180/0x180 [ 1751.663904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.665027] addrconf_notify+0x161/0x2390 [ 1751.665950] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1751.667161] ? tun_device_event+0x71/0x1160 [ 1751.668082] ? mark_held_locks+0x9e/0xe0 [ 1751.668943] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1751.670054] ? inet6_ifinfo_notify+0x150/0x150 [ 1751.671023] ? failover_register+0x530/0x530 [ 1751.671967] raw_notifier_call_chain+0xb3/0x110 [ 1751.672957] call_netdevice_notifiers_info+0xba/0x130 [ 1751.674059] __dev_notify_flags+0x1de/0x2c0 [ 1751.674976] ? dev_change_name+0x6b0/0x6b0 [ 1751.675874] ? __dev_change_flags+0x4cf/0x6e0 [ 1751.676846] ? dev_set_allmulti+0x30/0x30 [ 1751.677735] ? lock_acquire+0x197/0x470 [ 1751.678564] ? full_name_hash+0xb5/0xf0 [ 1751.679404] dev_change_flags+0x100/0x160 [ 1751.680286] dev_ifsioc+0x5b9/0xa00 [ 1751.681060] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1751.682176] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1751.683287] dev_ioctl+0x23c/0xd30 [ 1751.684039] sock_do_ioctl+0x17d/0x300 [ 1751.684857] ? compat_ifr_data_ioctl+0x180/0x180 [ 1751.685868] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1751.687069] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1751.688162] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1751.689268] ? generic_block_fiemap+0x60/0x60 [ 1751.690208] ? lock_downgrade+0x6d0/0x6d0 [ 1751.691082] sock_ioctl+0x3ef/0x710 [ 1751.691844] ? dlci_ioctl_set+0x30/0x30 [ 1751.692689] ? selinux_file_ioctl+0xb6/0x270 [ 1751.693626] ? dlci_ioctl_set+0x30/0x30 [ 1751.694459] __x64_sys_ioctl+0x19a/0x210 [ 1751.695311] do_syscall_64+0x33/0x40 [ 1751.696093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1751.697163] RIP: 0033:0x7fbed20b4b19 [ 1751.697949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.701805] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.703402] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1751.704898] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1751.706400] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.707899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.709398] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 22:24:32 executing program 2: prctl$PR_GET_FP_MODE(0x2e) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) read$usbmon(0xffffffffffffffff, &(0x7f0000001bc0)=""/174, 0xae) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0xfffffffffffffffc) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c80)={"d0e09cd305899461fa642eb234ef8d50", 0x0, 0x0, {0x3, 0x5}, {0x100}, 0x80, [0xffffffffffff8001, 0x7, 0x0, 0x9, 0x7, 0x2, 0x3, 0x1000, 0x10001, 0x7, 0x74a4, 0x5, 0x0, 0x1e, 0x3f, 0x60dd]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001e80)={{r1}, r2, 0x2, @inherit={0x70, &(0x7f0000001e00)={0x1, 0x5, 0x5, 0x7fff, {0x9, 0x400, 0x8, 0x9, 0x5b7e}, [0xffffffffffffffff, 0x2c, 0x5, 0x1f, 0x7]}}, @devid}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x27, &(0x7f0000000040)="ebaa6da989afc4113f5d650f1d414da606129ccf210477f25018a32187a5fe6c9b20b8bf22e357", 0x44, 0x0, &(0x7f0000000100)="57933c7f82f3fade1da9412af2f8dea6dbb8f1878cf5799f6bf699103a19196dfb6b324c775c93094ab4292b196f7c95f9520c3b8c5bfe51fd6935a2d6863fbc6ac03b47"}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/152, 0x98}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000d2204d3440af444f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/81, 0x51}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f00000016c0)=""/104, 0x68}, {&(0x7f0000001740)=""/210, 0xd2}, {&(0x7f0000001840)=""/42, 0x2a}, {&(0x7f0000001880)=""/46, 0x2e}, {&(0x7f00000018c0)=""/82, 0x52}, {&(0x7f0000001940)=""/111, 0x6f}], 0x8, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x2, 0x40002020, &(0x7f0000001b80)) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) openat(r4, &(0x7f0000002e80)='./file1\x00', 0x1400, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 22:24:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8912, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:32 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:32 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1752.044134] FAULT_INJECTION: forcing a failure. [ 1752.044134] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.046768] CPU: 1 PID: 9975 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1752.048204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.049959] Call Trace: [ 1752.050524] dump_stack+0x107/0x167 [ 1752.051292] should_fail.cold+0x5/0xa [ 1752.052096] ? create_object.isra.0+0x3a/0xa20 [ 1752.053057] should_failslab+0x5/0x20 [ 1752.053867] kmem_cache_alloc+0x5b/0x310 [ 1752.054723] create_object.isra.0+0x3a/0xa20 [ 1752.055639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.056710] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1752.057777] ? netlink_trim+0x1ee/0x250 [ 1752.058623] pskb_expand_head+0x15a/0x1040 [ 1752.059529] netlink_trim+0x1ee/0x250 [ 1752.060346] netlink_broadcast_filtered+0x62/0xe00 [ 1752.061385] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 1752.062393] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 1752.063387] nlmsg_notify+0x94/0x290 [ 1752.064176] rtmsg_ifinfo+0xf5/0x120 [ 1752.064959] __dev_notify_flags+0x22a/0x2c0 [ 1752.065876] ? dev_change_name+0x6b0/0x6b0 [ 1752.066759] ? __dev_change_flags+0x4cf/0x6e0 [ 1752.067707] ? dev_set_allmulti+0x30/0x30 [ 1752.068578] ? lock_acquire+0x197/0x470 [ 1752.069416] ? full_name_hash+0xb5/0xf0 [ 1752.070257] dev_change_flags+0x100/0x160 [ 1752.071129] dev_ifsioc+0x5b9/0xa00 [ 1752.071900] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1752.073010] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1752.074128] dev_ioctl+0x23c/0xd30 [ 1752.074888] sock_do_ioctl+0x17d/0x300 [ 1752.075711] ? compat_ifr_data_ioctl+0x180/0x180 [ 1752.076716] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1752.077942] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1752.079032] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1752.080134] ? generic_block_fiemap+0x60/0x60 [ 1752.081072] ? lock_downgrade+0x6d0/0x6d0 [ 1752.081966] sock_ioctl+0x3ef/0x710 [ 1752.082730] ? dlci_ioctl_set+0x30/0x30 [ 1752.083572] ? selinux_file_ioctl+0xb6/0x270 [ 1752.084509] ? dlci_ioctl_set+0x30/0x30 [ 1752.085353] __x64_sys_ioctl+0x19a/0x210 [ 1752.086216] do_syscall_64+0x33/0x40 [ 1752.087006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.088092] RIP: 0033:0x7fe192ab9b19 [ 1752.088871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.092731] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.094353] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1752.095860] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1752.097370] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.098879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.100370] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:24:45 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:45 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1765.339149] FAULT_INJECTION: forcing a failure. [ 1765.339149] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.341841] CPU: 0 PID: 9982 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1765.343374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.345232] Call Trace: [ 1765.345838] dump_stack+0x107/0x167 [ 1765.346660] should_fail.cold+0x5/0xa [ 1765.347518] ? __alloc_skb+0x6d/0x5b0 [ 1765.348377] should_failslab+0x5/0x20 [ 1765.349245] kmem_cache_alloc_node+0x55/0x330 [ 1765.350270] __alloc_skb+0x6d/0x5b0 [ 1765.351091] inet6_rt_notify+0xed/0x2a0 [ 1765.351988] fib6_del+0xf4c/0x1540 [ 1765.352802] ? fib6_locate+0x660/0x660 [ 1765.353687] ? fib6_ifdown+0xca/0x8f0 [ 1765.354676] fib6_clean_node+0x39e/0x570 [ 1765.355660] ? fib6_del+0x1540/0x1540 [ 1765.356542] ? fib6_clean_tree+0x14c/0x260 [ 1765.357537] fib6_walk_continue+0x35c/0x710 [ 1765.358529] ? trace_hardirqs_on+0x5b/0x180 [ 1765.359520] fib6_clean_tree+0x154/0x260 [ 1765.360447] ? fib6_ifup+0x2a0/0x2a0 [ 1765.361313] ? fib6_info_destroy_rcu+0x210/0x210 [ 1765.362411] ? fib6_del+0x1540/0x1540 [ 1765.363281] ? fib6_ifup+0x2a0/0x2a0 [ 1765.364133] ? spin_bug+0x100/0x100 [ 1765.364974] ? fib6_ifup+0x2a0/0x2a0 [ 1765.365835] __fib6_clean_all+0xf0/0x2a0 [ 1765.366770] rt6_disable_ip+0x4e9/0x5d0 [ 1765.367679] ? lock_chain_count+0x20/0x20 [ 1765.368636] ? rt6_sync_down_dev+0x160/0x160 [ 1765.369648] ? __lock_acquire+0x1657/0x5b00 [ 1765.370653] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1765.371742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1765.372947] ? addrconf_dad_run+0x180/0x180 [ 1765.373941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.375151] addrconf_notify+0x161/0x2390 [ 1765.376097] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1765.377409] ? tun_device_event+0x71/0x1160 [ 1765.378389] ? mark_held_locks+0x9e/0xe0 [ 1765.379312] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.380491] ? inet6_ifinfo_notify+0x150/0x150 [ 1765.381539] ? failover_register+0x530/0x530 [ 1765.382552] raw_notifier_call_chain+0xb3/0x110 [ 1765.383623] call_netdevice_notifiers_info+0xba/0x130 [ 1765.384792] __dev_notify_flags+0x1de/0x2c0 [ 1765.385780] ? dev_change_name+0x6b0/0x6b0 [ 1765.386735] ? __dev_change_flags+0x4cf/0x6e0 [ 1765.387762] ? dev_set_allmulti+0x30/0x30 [ 1765.388712] ? lock_acquire+0x197/0x470 [ 1765.389624] ? full_name_hash+0xb5/0xf0 [ 1765.390541] dev_change_flags+0x100/0x160 [ 1765.391493] dev_ifsioc+0x5b9/0xa00 [ 1765.392327] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1765.393529] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1765.394736] dev_ioctl+0x23c/0xd30 [ 1765.395553] sock_do_ioctl+0x17d/0x300 [ 1765.396444] ? compat_ifr_data_ioctl+0x180/0x180 [ 1765.397541] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1765.398851] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.400032] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1765.401229] ? generic_block_fiemap+0x60/0x60 [ 1765.402257] ? lock_downgrade+0x6d0/0x6d0 [ 1765.403210] sock_ioctl+0x3ef/0x710 [ 1765.404041] ? dlci_ioctl_set+0x30/0x30 [ 1765.404958] ? selinux_file_ioctl+0xb6/0x270 [ 1765.405978] ? dlci_ioctl_set+0x30/0x30 [ 1765.406890] __x64_sys_ioctl+0x19a/0x210 [ 1765.407829] do_syscall_64+0x33/0x40 [ 1765.408691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1765.409880] RIP: 0033:0x7fe192ab9b19 [ 1765.410733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.414971] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.416725] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1765.418373] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1765.420016] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.421663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.423315] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:24:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x150, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008800}, 0x42000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802060000010802110000000802110000000000000000000000000064000100000e020202020202010882848b960c121824e3d987d8df7a3ffbd901b2c4975df9e9fcfcf6ebe8ffa1c939d74dbc45c238a0079bf0c52934334d02ebe5c3ad5f8451434db196271f2d1208a74276e8b9a8a6c94fdb8823700f02ec1474c5efd86c9ffd25fa7d28ef66dd5a"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x7, 0x0, {0x2, 0x3f, 0x0, 0x380, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x10000}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x1}}, [{0xdd, 0x2e, "85a460f0faa828129c2ccbc39b65da3702a99d60aca68d81bda21ce3bd702836b5f218163ea4f350c45a146742f2"}]}, 0x8b) 22:24:45 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8910, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:45 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:45 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:45 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8913, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xd8499488957a772f}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4881) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3a}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008080}, 0x8084) [ 1765.434290] FAULT_INJECTION: forcing a failure. [ 1765.434290] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.435936] CPU: 1 PID: 9988 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1765.436889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.438043] Call Trace: [ 1765.438406] dump_stack+0x107/0x167 [ 1765.438911] should_fail.cold+0x5/0xa [ 1765.439442] should_failslab+0x5/0x20 [ 1765.439977] __kmalloc_node_track_caller+0x74/0x3b0 [ 1765.440666] ? inet6_ifa_notify+0x11d/0x230 [ 1765.441267] __alloc_skb+0xb1/0x5b0 [ 1765.441785] inet6_ifa_notify+0x11d/0x230 [ 1765.442354] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1765.442967] __ipv6_ifa_notify+0x180/0xaa0 [ 1765.443553] ? modify_prefix_route+0x530/0x530 [ 1765.444182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.444906] ? __local_bh_enable_ip+0x9d/0x100 [ 1765.445541] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1765.446208] ? addrconf_dad_run+0x180/0x180 [ 1765.446804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.447542] addrconf_notify+0x161/0x2390 [ 1765.448124] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1765.448917] ? tun_device_event+0x71/0x1160 [ 1765.449520] ? mark_held_locks+0x9e/0xe0 [ 1765.450085] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.450799] ? inet6_ifinfo_notify+0x150/0x150 [ 1765.451429] ? failover_register+0x530/0x530 [ 1765.452044] raw_notifier_call_chain+0xb3/0x110 [ 1765.452695] call_netdevice_notifiers_info+0xba/0x130 [ 1765.453413] __dev_notify_flags+0x1de/0x2c0 [ 1765.454008] ? dev_change_name+0x6b0/0x6b0 [ 1765.454598] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1765.455353] ? dev_change_flags+0x96/0x160 [ 1765.455936] ? dev_change_flags+0xa0/0x160 [ 1765.456525] dev_change_flags+0x100/0x160 [ 1765.457099] dev_ifsioc+0x5b9/0xa00 [ 1765.457611] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1765.458333] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1765.459059] dev_ioctl+0x23c/0xd30 [ 1765.459552] sock_do_ioctl+0x17d/0x300 [ 1765.460090] ? compat_ifr_data_ioctl+0x180/0x180 [ 1765.460745] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1765.461544] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.462260] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1765.462984] ? generic_block_fiemap+0x60/0x60 [ 1765.463596] ? lock_downgrade+0x6d0/0x6d0 [ 1765.464170] sock_ioctl+0x3ef/0x710 [ 1765.464670] ? dlci_ioctl_set+0x30/0x30 [ 1765.465223] ? selinux_file_ioctl+0xb6/0x270 [ 1765.465832] ? dlci_ioctl_set+0x30/0x30 [ 1765.466379] __x64_sys_ioctl+0x19a/0x210 [ 1765.466937] do_syscall_64+0x33/0x40 [ 1765.467449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1765.468156] RIP: 0033:0x7fbed20b4b19 [ 1765.468667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.471211] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.472264] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1765.473250] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1765.474242] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.475223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.476207] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 22:24:45 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffb, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1765.524540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1765.533181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 22:24:46 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 9) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:46 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x321, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:46 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8916, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1765.674640] FAULT_INJECTION: forcing a failure. [ 1765.674640] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.676056] CPU: 1 PID: 10020 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1765.676868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.677852] Call Trace: [ 1765.678176] dump_stack+0x107/0x167 [ 1765.678607] should_fail.cold+0x5/0xa [ 1765.679061] ? create_object.isra.0+0x3a/0xa20 [ 1765.679603] should_failslab+0x5/0x20 [ 1765.680054] kmem_cache_alloc+0x5b/0x310 [ 1765.680540] create_object.isra.0+0x3a/0xa20 [ 1765.681059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1765.681673] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1765.682272] ? inet6_ifa_notify+0x11d/0x230 [ 1765.682790] __alloc_skb+0xb1/0x5b0 [ 1765.683223] inet6_ifa_notify+0x11d/0x230 [ 1765.683711] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1765.684242] __ipv6_ifa_notify+0x180/0xaa0 [ 1765.684742] ? modify_prefix_route+0x530/0x530 [ 1765.685285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.685914] ? __local_bh_enable_ip+0x9d/0x100 [ 1765.686461] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1765.687025] ? addrconf_dad_run+0x180/0x180 [ 1765.687533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.688168] addrconf_notify+0x161/0x2390 [ 1765.688661] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1765.689350] ? tun_device_event+0x71/0x1160 [ 1765.689858] ? mark_held_locks+0x9e/0xe0 [ 1765.690337] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.690946] ? inet6_ifinfo_notify+0x150/0x150 [ 1765.691482] ? failover_register+0x530/0x530 [ 1765.692005] raw_notifier_call_chain+0xb3/0x110 [ 1765.692553] call_netdevice_notifiers_info+0xba/0x130 [ 1765.693157] __dev_notify_flags+0x1de/0x2c0 [ 1765.693671] ? dev_change_name+0x6b0/0x6b0 [ 1765.694170] ? __dev_change_flags+0x4cf/0x6e0 [ 1765.694697] ? dev_set_allmulti+0x30/0x30 [ 1765.695183] ? lock_acquire+0x197/0x470 [ 1765.695656] ? full_name_hash+0xb5/0xf0 [ 1765.696123] dev_change_flags+0x100/0x160 [ 1765.696613] dev_ifsioc+0x5b9/0xa00 [ 1765.697046] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1765.697667] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1765.698285] dev_ioctl+0x23c/0xd30 [ 1765.698703] sock_do_ioctl+0x17d/0x300 [ 1765.699159] ? compat_ifr_data_ioctl+0x180/0x180 [ 1765.699711] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1765.700390] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.700999] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1765.701625] ? generic_block_fiemap+0x60/0x60 [ 1765.702151] ? lock_downgrade+0x6d0/0x6d0 [ 1765.702643] sock_ioctl+0x3ef/0x710 [ 1765.703083] ? dlci_ioctl_set+0x30/0x30 [ 1765.703553] ? selinux_file_ioctl+0xb6/0x270 [ 1765.704076] ? dlci_ioctl_set+0x30/0x30 [ 1765.704551] __x64_sys_ioctl+0x19a/0x210 [ 1765.705032] do_syscall_64+0x33/0x40 [ 1765.705481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1765.706082] RIP: 0033:0x7fbed20b4b19 [ 1765.706519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.708679] RSP: 002b:00007fbecf62a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.709576] RAX: ffffffffffffffda RBX: 00007fbed21c7f60 RCX: 00007fbed20b4b19 [ 1765.710407] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1765.711234] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.712063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.712894] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1765.716147] FAULT_INJECTION: forcing a failure. [ 1765.716147] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.718876] CPU: 0 PID: 10021 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1765.720502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.722459] Call Trace: [ 1765.723075] dump_stack+0x107/0x167 [ 1765.723934] should_fail.cold+0x5/0xa [ 1765.724824] ? create_object.isra.0+0x3a/0xa20 [ 1765.725898] should_failslab+0x5/0x20 [ 1765.726796] kmem_cache_alloc+0x5b/0x310 [ 1765.727737] ? lock_acquire+0x197/0x470 [ 1765.728659] create_object.isra.0+0x3a/0xa20 [ 1765.729680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1765.730855] kmem_cache_alloc_node+0x169/0x330 [ 1765.731937] __alloc_skb+0x6d/0x5b0 [ 1765.732795] inet6_rt_notify+0xed/0x2a0 [ 1765.733729] fib6_del+0xf4c/0x1540 [ 1765.734567] ? fib6_locate+0x660/0x660 [ 1765.735476] ? fib6_ifdown+0xca/0x8f0 [ 1765.736373] fib6_clean_node+0x39e/0x570 [ 1765.737341] ? fib6_del+0x1540/0x1540 [ 1765.738238] ? fib6_clean_tree+0x14c/0x260 [ 1765.739229] fib6_walk_continue+0x35c/0x710 [ 1765.740227] ? trace_hardirqs_on+0x5b/0x180 [ 1765.741229] fib6_clean_tree+0x154/0x260 [ 1765.742168] ? fib6_ifup+0x2a0/0x2a0 [ 1765.743026] ? fib6_info_destroy_rcu+0x210/0x210 [ 1765.744120] ? fib6_del+0x1540/0x1540 [ 1765.745281] ? fib6_ifup+0x2a0/0x2a0 [ 1765.746139] ? spin_bug+0x100/0x100 [ 1765.746970] ? fib6_ifup+0x2a0/0x2a0 [ 1765.747816] __fib6_clean_all+0xf0/0x2a0 [ 1765.748748] rt6_disable_ip+0x4e9/0x5d0 [ 1765.749656] ? lock_chain_count+0x20/0x20 [ 1765.750605] ? rt6_sync_down_dev+0x160/0x160 [ 1765.751601] ? __lock_acquire+0x1657/0x5b00 [ 1765.752592] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1765.753672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1765.754866] ? addrconf_dad_run+0x180/0x180 [ 1765.755836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.757038] addrconf_notify+0x161/0x2390 [ 1765.757984] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1765.759274] ? tun_device_event+0x71/0x1160 [ 1765.760257] ? mark_held_locks+0x9e/0xe0 [ 1765.761168] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.762337] ? inet6_ifinfo_notify+0x150/0x150 [ 1765.763353] ? failover_register+0x530/0x530 [ 1765.764358] raw_notifier_call_chain+0xb3/0x110 [ 1765.765415] call_netdevice_notifiers_info+0xba/0x130 [ 1765.766573] __dev_notify_flags+0x1de/0x2c0 [ 1765.767543] ? dev_change_name+0x6b0/0x6b0 [ 1765.768488] ? __dev_change_flags+0x4cf/0x6e0 [ 1765.769507] ? dev_set_allmulti+0x30/0x30 [ 1765.770434] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1765.771664] dev_change_flags+0x100/0x160 [ 1765.772600] dev_ifsioc+0x5b9/0xa00 [ 1765.773427] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1765.774602] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1765.775787] dev_ioctl+0x23c/0xd30 [ 1765.776588] sock_do_ioctl+0x17d/0x300 [ 1765.777467] ? compat_ifr_data_ioctl+0x180/0x180 [ 1765.778525] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1765.779802] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1765.780952] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1765.782130] ? generic_block_fiemap+0x60/0x60 [ 1765.783126] ? lock_downgrade+0x6d0/0x6d0 [ 1765.784057] sock_ioctl+0x3ef/0x710 [ 1765.784868] ? dlci_ioctl_set+0x30/0x30 [ 1765.785772] ? selinux_file_ioctl+0xb6/0x270 [ 1765.786758] ? dlci_ioctl_set+0x30/0x30 [ 1765.787648] __x64_sys_ioctl+0x19a/0x210 [ 1765.788559] do_syscall_64+0x33/0x40 [ 1765.789404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1765.790547] RIP: 0033:0x7fe192ab9b19 [ 1765.791377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.795498] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.797197] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1765.798792] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1765.800380] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.801977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.803568] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1765.916111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 22:24:59 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffe, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:24:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x150, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008800}, 0x42000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802060000010802110000000802110000000000000000000000000064000100000e020202020202010882848b960c121824e3d987d8df7a3ffbd901b2c4975df9e9fcfcf6ebe8ffa1c939d74dbc45c238a0079bf0c52934334d02ebe5c3ad5f8451434db196271f2d1208a74276e8b9a8a6c94fdb8823700f02ec1474c5efd86c9ffd25fa7d28ef66dd5a"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x7, 0x0, {0x2, 0x3f, 0x0, 0x380, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x10000}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x1}}, [{0xdd, 0x2e, "85a460f0faa828129c2ccbc39b65da3702a99d60aca68d81bda21ce3bd702836b5f218163ea4f350c45a146742f2"}]}, 0x8b) 22:24:59 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:59 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8911, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:24:59 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000880)=""/4096) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "d589949dece20f0da74cf5e4643ceca734c529a58d5a5d8118014e404d6eb2fe460589f8ed9b1352e563fe421a0d8a304a2f36408ffb283492a837fbf2fbaaa1", 0x18}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000005c0)={0x9, 0x1, {0xffffffffffffffff, 0x0, 0x1000, 0x1, 0x10001}, 0x1}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x3, &(0x7f0000000380)=[{0x9}, {0x8000, 0x9c4}, {0x3f, 0x80}]}) unshare(0x48020200) keyctl$describe(0x6, r1, &(0x7f0000000540)=""/86, 0x56) 22:24:59 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 16) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:59 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:24:59 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1779.512085] FAULT_INJECTION: forcing a failure. [ 1779.512085] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.514690] CPU: 0 PID: 10042 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1779.516128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1779.517871] Call Trace: [ 1779.518427] dump_stack+0x107/0x167 [ 1779.519199] should_fail.cold+0x5/0xa [ 1779.519995] ? create_object.isra.0+0x3a/0xa20 [ 1779.520953] should_failslab+0x5/0x20 [ 1779.521768] kmem_cache_alloc+0x5b/0x310 [ 1779.522620] ? lock_acquire+0x197/0x470 [ 1779.523467] create_object.isra.0+0x3a/0xa20 [ 1779.524389] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1779.525476] kmem_cache_alloc_node+0x169/0x330 [ 1779.526448] __alloc_skb+0x6d/0x5b0 [ 1779.527224] inet6_rt_notify+0xed/0x2a0 [ 1779.528085] fib6_del+0xf4c/0x1540 [ 1779.528851] ? fib6_locate+0x660/0x660 [ 1779.529688] ? fib6_ifdown+0xca/0x8f0 [ 1779.530495] fib6_clean_node+0x39e/0x570 [ 1779.531353] ? fib6_del+0x1540/0x1540 [ 1779.532163] ? fib6_clean_tree+0x14c/0x260 [ 1779.533060] fib6_walk_continue+0x35c/0x710 [ 1779.533991] ? trace_hardirqs_on+0x5b/0x180 [ 1779.534901] fib6_clean_tree+0x154/0x260 [ 1779.535753] ? fib6_ifup+0x2a0/0x2a0 [ 1779.536529] ? fib6_info_destroy_rcu+0x210/0x210 [ 1779.537538] ? fib6_del+0x1540/0x1540 [ 1779.538345] ? fib6_ifup+0x2a0/0x2a0 [ 1779.539132] ? spin_bug+0x100/0x100 [ 1779.539912] ? fib6_ifup+0x2a0/0x2a0 [ 1779.540701] __fib6_clean_all+0xf0/0x2a0 [ 1779.541584] rt6_disable_ip+0x4e9/0x5d0 [ 1779.542437] ? lock_chain_count+0x20/0x20 [ 1779.543325] ? rt6_sync_down_dev+0x160/0x160 [ 1779.544256] ? __lock_acquire+0x1657/0x5b00 [ 1779.545189] addrconf_ifdown.isra.0+0x11f/0x15f0 [ 1779.546211] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1779.547348] ? addrconf_dad_run+0x180/0x180 [ 1779.548264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1779.549397] addrconf_notify+0x161/0x2390 [ 1779.550291] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1779.551510] ? tun_device_event+0x71/0x1160 [ 1779.552423] ? mark_held_locks+0x9e/0xe0 [ 1779.553295] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1779.554398] ? inet6_ifinfo_notify+0x150/0x150 [ 1779.555359] ? failover_register+0x530/0x530 [ 1779.556306] raw_notifier_call_chain+0xb3/0x110 [ 1779.557295] call_netdevice_notifiers_info+0xba/0x130 [ 1779.558400] __dev_notify_flags+0x1de/0x2c0 [ 1779.559323] ? dev_change_name+0x6b0/0x6b0 [ 1779.560214] ? __dev_change_flags+0x4cf/0x6e0 [ 1779.561175] ? dev_set_allmulti+0x30/0x30 [ 1779.562067] ? lock_acquire+0x197/0x470 [ 1779.562911] ? full_name_hash+0xb5/0xf0 [ 1779.563757] dev_change_flags+0x100/0x160 [ 1779.564642] dev_ifsioc+0x5b9/0xa00 [ 1779.565416] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1779.566527] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1779.567654] dev_ioctl+0x23c/0xd30 [ 1779.568411] sock_do_ioctl+0x17d/0x300 [ 1779.569317] ? compat_ifr_data_ioctl+0x180/0x180 [ 1779.569364] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1779.569383] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1779.569406] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1779.569426] ? generic_block_fiemap+0x60/0x60 [ 1779.569456] ? lock_downgrade+0x6d0/0x6d0 [ 1779.569483] sock_ioctl+0x3ef/0x710 [ 1779.569502] ? dlci_ioctl_set+0x30/0x30 [ 1779.569529] ? selinux_file_ioctl+0xb6/0x270 [ 1779.569553] ? dlci_ioctl_set+0x30/0x30 [ 1779.569577] __x64_sys_ioctl+0x19a/0x210 [ 1779.569600] do_syscall_64+0x33/0x40 [ 1779.569620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1779.569632] RIP: 0033:0x7fe192ab9b19 [ 1779.569649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:25:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:00 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1779.569659] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:25:00 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1779.569681] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1779.569691] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1779.569702] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 22:25:00 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2103, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1779.569712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1779.569723] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1779.580191] FAULT_INJECTION: forcing a failure. 22:25:00 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8912, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 1779.580191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.580243] CPU: 1 PID: 10052 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 1779.580253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1779.580259] Call Trace: [ 1779.580287] dump_stack+0x107/0x167 [ 1779.580309] should_fail.cold+0x5/0xa [ 1779.580337] _copy_to_user+0x2e/0x180 [ 1779.580364] simple_read_from_buffer+0xcc/0x160 22:25:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891e, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1779.580390] proc_fail_nth_read+0x198/0x230 [ 1779.580412] ? proc_sessionid_read+0x230/0x230 [ 1779.580431] ? security_file_permission+0xb1/0xe0 [ 1779.580462] ? proc_sessionid_read+0x230/0x230 [ 1779.580482] vfs_read+0x228/0x620 [ 1779.580508] ksys_read+0x12d/0x260 22:25:00 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 11) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1779.580527] ? vfs_write+0xb10/0xb10 [ 1779.580552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1779.580576] do_syscall_64+0x33/0x40 [ 1779.580594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1779.580606] RIP: 0033:0x7fbed206769c [ 1779.580622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1779.580632] RSP: 002b:00007fbecf62a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1779.580652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbed206769c [ 1779.580663] RDX: 000000000000000f RSI: 00007fbecf62a1e0 RDI: 0000000000000005 [ 1779.580673] RBP: 00007fbecf62a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1779.580683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:25:00 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 1779.580693] R13: 00007ffc1441cabf R14: 00007fbecf62a300 R15: 0000000000022000 [ 1779.606040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.618292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.947304] FAULT_INJECTION: forcing a failure. [ 1779.947304] name failslab, interval 1, probability 0, space 0, times 0 22:25:00 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:00 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1779.947326] CPU: 0 PID: 10085 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1779.947348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1779.947354] Call Trace: [ 1779.947379] dump_stack+0x107/0x167 [ 1779.947402] should_fail.cold+0x5/0xa [ 1779.947421] ? ___slab_alloc+0x155/0x700 [ 1779.947441] ? create_object.isra.0+0x3a/0xa20 [ 1779.947470] should_failslab+0x5/0x20 [ 1779.947489] kmem_cache_alloc+0x5b/0x310 22:25:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891f, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1779.947516] create_object.isra.0+0x3a/0xa20 [ 1779.947532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1779.947559] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1779.947576] ? inet6_rt_notify+0xed/0x2a0 [ 1779.947604] __alloc_skb+0xb1/0x5b0 [ 1779.947629] inet6_rt_notify+0xed/0x2a0 [ 1779.947654] fib6_del+0xf4c/0x1540 [ 1779.947690] ? fib6_locate+0x660/0x660 [ 1779.947713] ? fib6_ifdown+0xca/0x8f0 [ 1779.947742] fib6_clean_node+0x39e/0x570 [ 1779.947765] ? fib6_del+0x1540/0x1540 [ 1779.947787] ? fib6_clean_tree+0x14c/0x260 [ 1779.947818] fib6_walk_continue+0x35c/0x710 [ 1779.947838] ? trace_hardirqs_on+0x5b/0x180 [ 1779.947861] fib6_clean_tree+0x154/0x260 [ 1779.947877] ? fib6_ifup+0x2a0/0x2a0 [ 1779.947898] ? fib6_info_destroy_rcu+0x210/0x210 [ 1779.947925] ? fib6_del+0x1540/0x1540 [ 1779.947941] ? fib6_ifup+0x2a0/0x2a0 [ 1779.947958] ? spin_bug+0x100/0x100 [ 1779.947984] ? fib6_ifup+0x2a0/0x2a0 [ 1779.948003] __fib6_clean_all+0xf0/0x2a0 [ 1779.948026] rt6_disable_ip+0x4e9/0x5d0 [ 1779.948044] ? lock_chain_count+0x20/0x20 [ 1779.948072] ? rt6_sync_down_dev+0x160/0x160 [ 1779.948089] ? __lock_acquire+0x1657/0x5b00 [ 1779.948124] addrconf_ifdown.isra.0+0x11f/0x15f0 22:25:00 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1779.948148] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1779.948175] ? addrconf_dad_run+0x180/0x180 [ 1779.948194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1779.948232] addrconf_notify+0x161/0x2390 [ 1779.948255] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1779.948273] ? tun_device_event+0x71/0x1160 [ 1779.948293] ? mark_held_locks+0x9e/0xe0 [ 1779.948313] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1779.948337] ? inet6_ifinfo_notify+0x150/0x150 [ 1779.948351] ? failover_register+0x530/0x530 [ 1779.948385] raw_notifier_call_chain+0xb3/0x110 [ 1779.948413] call_netdevice_notifiers_info+0xba/0x130 [ 1779.948435] __dev_notify_flags+0x1de/0x2c0 [ 1779.948453] ? dev_change_name+0x6b0/0x6b0 [ 1779.948469] ? __dev_change_flags+0x4cf/0x6e0 [ 1779.948493] ? dev_set_allmulti+0x30/0x30 [ 1779.948515] ? lock_acquire+0x197/0x470 [ 1779.948531] ? full_name_hash+0xb5/0xf0 [ 1779.948556] dev_change_flags+0x100/0x160 [ 1779.948580] dev_ifsioc+0x5b9/0xa00 [ 1779.948601] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1779.948619] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1779.948649] dev_ioctl+0x23c/0xd30 [ 1779.948672] sock_do_ioctl+0x17d/0x300 [ 1779.948691] ? compat_ifr_data_ioctl+0x180/0x180 [ 1779.948715] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1779.948733] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1779.948756] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1779.948776] ? generic_block_fiemap+0x60/0x60 [ 1779.948794] ? lock_downgrade+0x6d0/0x6d0 [ 1779.948820] sock_ioctl+0x3ef/0x710 [ 1779.948840] ? dlci_ioctl_set+0x30/0x30 [ 1779.948866] ? selinux_file_ioctl+0xb6/0x270 [ 1779.948890] ? dlci_ioctl_set+0x30/0x30 [ 1779.948913] __x64_sys_ioctl+0x19a/0x210 [ 1779.948936] do_syscall_64+0x33/0x40 [ 1779.948956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1779.948968] RIP: 0033:0x7fe192ab9b19 [ 1779.948985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1779.948996] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1779.949018] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1779.949029] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1779.949039] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1779.949050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1779.949060] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:25:13 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8913, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:13 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e00, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:13 executing program 1: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000018003bb63b97592ece5aca5f54433bde41017780e40d2685f99c0a585cc2a0b420d0dcdb52fdfd4f40256562eef018fe0633eeea", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x0, {}, 0x6, 0x6, 0x1, {0x0, 0x0, r0}}, 0x6) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="58e4114b01d10f2272ffffd38f74fa93dbb04186d1ccaf986e338900942e57ab1b014d03c85b9722b156515e7fc56358e55f80c146e10f6b4a7404609d8831090848a4d7d3c8e28667ab41cd7fa5fc394963084871ac3af039e14d390ed2dd7af96f", @ANYRES32, @ANYRES32]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000240)=@v1={0x2, "d68b"}, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, 0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) socketpair(0x2c, 0x3, 0x1, &(0x7f00000002c0)) 22:25:13 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 12) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:13 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:13 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8920, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:13 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b47, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:13 executing program 2: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x6, 0x2, 0x6, 0x3, 0x3ff, 0x7}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x41e100, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000047700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047900)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "fac715d15fa059"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000048900)={0x0, 0x0, "9bb7a09494ec5cd900fc3ecf5cfedd7b12e62081f8b65f6a40504a8997ce1e8d58388b0ac23a674c342d0d25376723c0cbc4b523c5df489ef72cf8b8807c0b84a0c9a8acd4ef06df0e010f1c63a9fc12cf10076d5c2d8159724f0f571e36be8fce803f70dad8dd718434b528e1f1cf77ac24a1b0502e61954b415ba23474aaf391f19b5e32121f397309729d3217040d3bfb91249272d7dd18f883ddc2ce681ad4e1b46e5b45b6a63962ec8515a70bdab88f60dbd363db0dd91a8ec1791261e2b7ed183f8f9d83da0aae4a812f6230055a3da2c6364108c2c0ad1761d45ada17dbd2daa9609024f1265c4d063154b30b48aed71cbbe8e9cf5fa657b7ca72184f", "361053a373a0624673dd59dcb3d26192bcc44c8a8b590f8aa8c96655f899e1237f96c0ff9d41c97dbafdb8fe901c90306f2262cf2d9213d301fda11af5c50ae69738ed3023410be468af976eeb4c21f8ed7893bfbb75a88889f09cfb6aece628213b9fafdbd63e0fcca7326a93aff3b38ea4b536b58668c236af9f8b0e1309ef0fc962a47c5040cae6ada0b8a9e0d2737f132684910018d40510645af7c674d47322459c526bf19d9e6977570dfed46245a84de54fb0d59f6171eed0d96e2ab96df573a5b0135c651592bd5baf7b37135b1646ffa349b1582eaeede0a5bd389972e07d20bca1bde6041f2a15499f2868f6bf3a1d72e8798120fbf1d94db43dc021a5a5627d6522f7fd67457662ed61e2f70662c4f7da39652e5391c5a8d59ddeade3017121aca4e78cd407a8bb92318615252643a61abf6a87ad9760689d03b4803df27743285a29a5609efa350aecafebfe1fc3f26266dfa3e6a8f00aa3edb68cd9d46cc0b8b378e587cd170e510c6821d79a0aef2c21c8a69bc5bfc3cc3afd76c90b016be3948dfa9dd26057d2c92db5ef11019ca848f94a62b8255872887f476e190592920f3437ae0d772908cee230a0a39e0fa27b48bbd52706268d3d453c1e85bf6a8466fe805240667dfd0fda0a9c5608f0f26eff9a8a3db1eca11696456e367f73acbb4f8a45b3fa1ca14e5d2be5b75a39b4249ba9d28744ea2b5397c33c76e157d4d5fe96c707cb92dc1418948480b33c98f4e47110c9272e5006a07194893dcfa525ba9490849720e6776415eeebc431cfc306bbe7ae1f838d6cdbe6a64a176a0368c59bdc60a3a816741f6f6927c1d6e97f11f31779eea5090122c03ea2936355a9d9bcfcc25cc36b36aa7ad86460c5cf425b424bdcc5b1f0748cffe1d6374bb9a9dbc55f9a56db53fdaa20d99839947fb6958b9bb8c72561b96165a21f3543a78db1a8e2d1a4727a6a76f8da2dd47a3b1b9825d3aa78631030ef1ed0507f754eb147efed3fbbb61941cce9f2553b46d2479cae20de4f7987ed1fa36c40d35931bc54ad3a43e691bf1595a96cf2c77f8b80c15fef9faac19176c17f71820ac62a51c304212a9543bf8e99401122c6922d7336708598e03abc96820d072a30c799fe0a772f6b79a3656362b7b7942c8681fd536982702a54587fea44920fa865efb5c725e6fcf8beacf6639a21c3bc00e38488c08db5ad57e6d795c515cca427f9e17d79398ddbdc07ebf9282203996e9cbad72c4ec26b31614ae38d7c4a860c6ab7ce3049f49758e2768ab225257d520a2331885dbf03f4df087de71250db61eea95cf62996eed21110a45f85651297a986309751d2db475f30f650cc47ee8d2eb40120f3ebb8c9707852c6b8da40ab961658e3b5ad0288f017b895f5f3c11fda5f423a8080352243b4a20fb56edc7ca12a07b766609c581a3f5c04c371855a8fc0b86f6c66c8b28f74a662230f91ad41730d982b2751238004cbb7c6d18c4af82bf489b1eb15dd4996a01e63101a2235989895b4e1581ab9fca9d0ee3707d942d087981c7c8dcba3b6abd0fced485c8a8b5f9aad2ae7241144b99f11021a90d5e21b50c759488a6cfe6c1a45c9083d1cdd538e4261bb2ce2a85d8eb25fd33e94574f67b1e6e352a9c660d279407c55cf7072b5de687824c5be5c31fc3c8f80bbcfbf0de900681a68fe77e70ed327c5e1009c736f183cf7d434d1e30219c9674182432d5aad96477e09abcfb42c0cbecf89f64dfcb99da83efd77339df026f95471dbb77e0c8856859a37912d2e8740d670ebddf248a696dca41a442feab1840953d3e9880ad216c39137373298ecc07628e58c19e4c9d8e37e9277b2a284df5e8963fbd8e7dd6a654ceebd0c01175e9295d9146800659ccb693a0d5f36694cdf8a46d3d89b72182f4fa615c2b5b6925a032f7738c63e1f4164351d5207b373ae4d8f80c5426da6b2aa84cbc1d79447030c52a1e9a8930420ee0b73457690a13b265483f9bb04218f44601522dfe5543ce7c0d1d8db3a3cd2930af2e121a66b0b979658b2d726241b28597ef4b83c720543904cc397584ef1fec48db3b3fb20a65e79d5004bf443e2cd5df4e79b88662118af91f0c6dff792619728193b3877759eb93f419411801fc9af9c591a42301d86fa38768100675e028249e2088f76e932661474e01ab8a781049faa41825b0a3aea24bc64523247b9e1047e20251a757748d977d2ae3a5135454a52f34e1bf6b76d19a8da6fce811de2e3b1cd21f2bed4d05a959d23a8506d79ef7b3cb30b76e642ac3375f48d578c5369874710455313729cdd0179cd93e8c6582ce4b4f5e6bbe5bba81666eeab7e624a9c4e228d73f895038cff86dd9bc10d6f845f99c63ad3bc096452d6be1d39144e4c29b82825c480dc4e66a6ddf27d6307e02a7d30f66a3243839afb3869d4c86a800f481254219458a50c21c54c5e190956bbf017fefaecbb36bc77d6ec3f5b0f53bbda1cbd70806077d31888bdf2331169959008e7e75398a8bab9d73e7cfaabd9e99bfd00dc94e439de9b6966d6e9901c0acd717686a5d62db0d8eeec786406b973a9c3de4d6745d252acd03cf28996308bdef5a46bc54592147bed37c869e23a78eca38dd26eeb253031f469b8af0f12380ef763a9b2c3a23c34ff4d6ab2a8da2dc0bc5e49d0cbb6068bb71e8fc485027308876d389f8c80a6da5c4c256079fbb1c4137e4ab6bea38680cb3b993b6e4cb4adb4224d0dfe04f19b5146d5ce6ca6eeac795180a794a4d76b050dc34ed70402bc132b543bb9a28c85e842279ab60f949d2c7d86ebf786f140aee3eda08a4115574c1ea7c27d00391042b458d15e80e65d2b3e527de6773bdd071b4c547eee390f16047d42583bb20fea1bc8e515320f019ca07e40066fcfded4ff97faef64155ba1419029587b922c8d672a639d43172a74cfef5ca62221f4babc4a6c4ca242d9cadb8ddf570bb24a3f32d31aa2d2690253935eab06daa4959ab6e765c2fd7da80929880be56c25988ff7eb019118a2aef829cabe26a3bcf4dc80520a5cea5c88caf6496e8d300938d371009342a5278e7dfeb612165f2fe12b929170b26c49cdbacaeb635e99125502e81d7cec3c6da76b88f3a7a29b279aecbec0c54aa859fa2260932cdb099865c292602dd51f14480f269ef118ba1b5a18d10980c79ac38984e76341930eecdfeb2c45383dd863a2cb45b4aa4e7c8616ab04c1c856be1aad98fffa5ce2394df9fb412f9aa1a7a76134db855990bee29002687fd0c640b03ff806d2c2c3a06b0748a9c8017bfeac28b0c2d6e8cf649d5779eb8134ba58342f296ebcab936299f8e0fa1759c0077c5f973b5bee572b233a083166e584386272ea3ae7f654c0937bd317b1933eab997ba8e6bd6c44c3088eff65e17c1e9be613247fcfa0ebd77cabe154e558c4d0931f66185e8e41e0dcda74c5fa97c4cd831d33e9c4fca42bdb1c19f4fb74aa2a59ec5a8d39d6888fca07beba972d8e254b640a153ab649dfd026e85770689f786816586c305fe3e1954f835256e62f49279bb648c52b72bf9478a73e31827b795fd608ce9e21e4198fb81a8467b484f18518c51852b2ae4018d85d81d32e6e446a93fe18a78f00b9a45306be8f079ea364bb8d89163efc1d43cbd32a0336df5adddcbd7ef1ca48b5e119ea354952439056f946578553e90874e00cd2bde0b5a1b6606d7beca222ce40a1132d4f9548fa179364147db42a093b0d56d1177b179339ff12687bee65239f687b6a11a0f754073bbc390f15e8d7f096f629c87ebf36c65be214db75c20dcb36672bc132fa07aa5efbf4f8b599f32a1b0c48e09d692ed0d7b09194cad649c076d30059be7228d36215e2981e43ad2759feaabc294531d4448ed4d4615a05d3aca73a62cd52fb01330da2dbbe8fec1a68c184e5988c57d8a59a6c5adc8aa1a0c00a39aee3efc44619a1f331fcbbf76e91a1380154f1f198f1a0b8bff54ed6db05961d461dd6c83f8df392458299991e67e567ec6526b3ec74e12b7b2ff818775c9cdcaacbd0a2e462c420c085d83594cd45306d872ba632213efb02d4d0701e20e4cd9a149fcf4e4e6068d7cedc70c83ce243c8f03def5c4c6fe96e0e720c9a3d76d6a1ddbbc7d33205e52a3f8ed12be711436c8c9fa47cb8fe9222de7a862f6a82785e83d7f365efca9fbf6fd85c05ac317f8582397766419956e24fe1bd2e334d722d64d5cca0ba129787e88b69c5948d849497690ba37c48d34fdde24b3c26bee026dbc52c44f9c45d74bf38d6b1b5018c93279ee61b684c6b301d9e6bc78f2ebb1baa6610740b8e5e68ff0865bebab405ad590e48b1a1a6dacaba8c85ff2d4c386590793c56a307db6e08d41ffdc35d0786e5963fdf97fa24f128632ee9a2b93b4e1baf4e4fa2bca756edee8d911f9acd5f26442f79ec316242a59e67eeaf52ade4f279b1bff73991adb115e9487ba1b7fb09590a634d6707f7d88880c3cefa724a6794a2abe9d685276a2bb6d86d67790c803899a490b0f7af73f470ea161d5b96af1cf59ec21083e60be7ef663b3c405813248d54d36bb642e23d19fe18da8015cd7c510bca56170b0c581cca840465ee45f80fcbb3238d85ed0c2bd241ff9e258beb71475fb558e937b4d3e23250875ee6118c87260d9fd237cd040c18e0c2be8e2e4944165c4421ca10c887d3d70f5885d836e7249c23293f49c9db91bb0dc42081e2abc6833ff80e67b4defdd70962abc14d81e477db3cc80ea8cba4febfd5d9e19772ec3ad5e280157e97aa269fd3da7387f3ea0f1783e18e8f4d9b5848b14eeb8b491be0635ffd9d0df98fe85301d5e311a25fb0f886fc87f0eede98e8d5d2d1989757dfac899071a6e8a836e7d8701a80168c1551b52083a31274491244dc231cfc68b1717c88a9883d30468be3c1564f17ddbd1357b77b050f4b08d654f7e373dcb43b43851e520555e15ba27153bdd99d7ab4c4267d19f35a415aa543aa0dcb41d1984ecc14be3713e3856b2ac430682a45f2d83763bee43d64aaaf0a35da777b51c5cd0eaa93d2b03d976544f805958bde6d3f9302873ffcd54605732e5178f1f9bc240cb5a80f5d69164fa52d2c255ef399d21cdb5aa3db9ddefee427d805474541ec9b749ebf5dcc3191e773bffcffbe576af281ecdc0dc56542493aeae793824978178b474d4a02a106a2bf969c2cf0f5ab1deb829c3a45c84de37b123ab4aa3b1e015b1b85b44ce61ece6b11b030917cd0d5edbe5b48a2e3840287be6a23d3336c3ea3ae14c2ac42a939890c9d092dcbf3161bf097388fdd2a7d5c721547506e6bc46ca0c481b10304dfad0247c043bb321b0d9f16d45053a50905f568c37300db2f5234f260c2ba67267b44b15bf2c848c1c085a84d313f1b1a47"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000049900)={{0x0, 0x0, 0x6, 0x100000000, 0x3, 0x7fff, 0x9, 0x401, 0x0, 0x7, 0x1d9, 0x23fb, 0x7, 0x9, 0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x102, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004a900)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000003d00000000070000000000000000010086d50000000100ffffffffffff01000100000000006f0700fcff000000050000000600000007000000ffffffff06000000000000002811000000000000090400000000000000000100000000003800"/160]) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004a9c0)={{0x0, 0x3, 0x800, 0x80000000, 0x8, 0x9, 0x196, 0x100, 0x7, 0x1, 0x80000001, 0x7, 0xfffffffffffffffa, 0x9, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) r18 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x102, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r18, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b9c0)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {r4, r5}, {r6, r9}, {r13}, {r14, r17}], 0x7, "01e4e37502bbb3"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) [ 1792.992917] FAULT_INJECTION: forcing a failure. [ 1792.992917] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.995734] CPU: 1 PID: 10115 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1792.997206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.998990] Call Trace: [ 1792.999558] dump_stack+0x107/0x167 [ 1793.000328] should_fail.cold+0x5/0xa [ 1793.001136] ? __alloc_skb+0x6d/0x5b0 [ 1793.001974] should_failslab+0x5/0x20 [ 1793.002778] kmem_cache_alloc_node+0x55/0x330 [ 1793.003744] __alloc_skb+0x6d/0x5b0 [ 1793.004515] inet6_ifa_notify+0x11d/0x230 [ 1793.005384] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1793.006368] __ipv6_ifa_notify+0x180/0xaa0 [ 1793.007269] ? modify_prefix_route+0x530/0x530 [ 1793.008236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.009341] ? __local_bh_enable_ip+0x9d/0x100 [ 1793.010348] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1793.011373] ? addrconf_dad_run+0x180/0x180 [ 1793.012287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.013417] addrconf_notify+0x161/0x2390 [ 1793.014321] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1793.015529] ? tun_device_event+0x71/0x1160 [ 1793.016437] ? mark_held_locks+0x9e/0xe0 [ 1793.017287] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1793.018403] ? inet6_ifinfo_notify+0x150/0x150 [ 1793.019352] ? failover_register+0x530/0x530 [ 1793.020286] raw_notifier_call_chain+0xb3/0x110 [ 1793.021274] call_netdevice_notifiers_info+0xba/0x130 [ 1793.022393] __dev_notify_flags+0x1de/0x2c0 [ 1793.023294] ? dev_change_name+0x6b0/0x6b0 [ 1793.024175] ? __dev_change_flags+0x4cf/0x6e0 [ 1793.025118] ? dev_set_allmulti+0x30/0x30 [ 1793.026024] ? lock_acquire+0x197/0x470 [ 1793.026860] ? full_name_hash+0xb5/0xf0 [ 1793.027698] dev_change_flags+0x100/0x160 [ 1793.028588] dev_ifsioc+0x5b9/0xa00 [ 1793.029357] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1793.030494] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1793.031609] dev_ioctl+0x23c/0xd30 [ 1793.032464] sock_do_ioctl+0x17d/0x300 [ 1793.033510] ? compat_ifr_data_ioctl+0x180/0x180 [ 1793.034800] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1793.036177] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1793.037287] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1793.038419] ? generic_block_fiemap+0x60/0x60 [ 1793.039374] ? lock_downgrade+0x6d0/0x6d0 [ 1793.040335] sock_ioctl+0x3ef/0x710 [ 1793.041116] ? dlci_ioctl_set+0x30/0x30 [ 1793.041965] ? selinux_file_ioctl+0xb6/0x270 [ 1793.042899] ? dlci_ioctl_set+0x30/0x30 [ 1793.043743] __x64_sys_ioctl+0x19a/0x210 [ 1793.044599] do_syscall_64+0x33/0x40 [ 1793.045381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1793.046481] RIP: 0033:0x7fe192ab9b19 [ 1793.047258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.051163] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.052757] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1793.054275] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1793.055828] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1793.057336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.058935] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 [ 1793.063775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:13 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff0f0000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1793.183186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:29 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8916, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x80000, 0x0) write(r2, 0x0, 0x31) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0) 22:25:29 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b49, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8921, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 13) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:29 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:29 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1c08a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x6c810, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x30) faccessat2(r0, &(0x7f0000000040)='mnt/encrypted_dir/../file0\x00', 0x80, 0x3e4fcec92923ce05) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x9}, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@llc={0x1a, 0x4, 0x7, 0x6, 0x5, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="6359abb9b90c5290713f16f28df365aa25773b317c18858c36f29f024c3a63a78e1c74360d", 0x25}, {&(0x7f0000000400)="90d6be116e0c7164fb2ae8cd7b1da9b8525322088a7bf6f2ae0aca6d9e0826dc920b77a9f54479f8e9e2f36e3b5b4743fe3179fc4dac1b42b6fad5d6cde7c71ca4e2eeb5a263ab85ae4142cbce732861670cb5a02803cf3b108393cb3ae5a1176e33fa1d5a7f0b63", 0x68}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1) openat(r2, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x200080, 0x16) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f00000001c0)='mnt/encrypted_dir/../file0\x00', 0xe2514abdea254a6, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x6654, &(0x7f0000000540)={0x0, 0x41ab, 0x0, 0x0, 0xdf}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00'}) [ 1808.938137] FAULT_INJECTION: forcing a failure. [ 1808.938137] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.940868] CPU: 1 PID: 10170 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1808.942368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.944132] Call Trace: [ 1808.944700] dump_stack+0x107/0x167 [ 1808.945476] should_fail.cold+0x5/0xa [ 1808.946300] ? create_object.isra.0+0x3a/0xa20 [ 1808.947282] should_failslab+0x5/0x20 [ 1808.948100] kmem_cache_alloc+0x5b/0x310 [ 1808.948971] create_object.isra.0+0x3a/0xa20 [ 1808.949912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1808.951007] kmem_cache_alloc_node+0x169/0x330 [ 1808.951989] __alloc_skb+0x6d/0x5b0 [ 1808.952767] inet6_ifa_notify+0x11d/0x230 [ 1808.953647] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1808.954612] __ipv6_ifa_notify+0x180/0xaa0 [ 1808.955520] ? modify_prefix_route+0x530/0x530 [ 1808.956504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.957622] ? __local_bh_enable_ip+0x9d/0x100 [ 1808.958609] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1808.959636] ? addrconf_dad_run+0x180/0x180 [ 1808.960556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.961700] addrconf_notify+0x161/0x2390 [ 1808.962595] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1808.963811] ? tun_device_event+0x71/0x1160 [ 1808.964733] ? mark_held_locks+0x9e/0xe0 [ 1808.965602] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1808.966716] ? inet6_ifinfo_notify+0x150/0x150 [ 1808.967685] ? failover_register+0x530/0x530 [ 1808.968640] raw_notifier_call_chain+0xb3/0x110 [ 1808.969642] call_netdevice_notifiers_info+0xba/0x130 [ 1808.970746] __dev_notify_flags+0x1de/0x2c0 [ 1808.971670] ? dev_change_name+0x6b0/0x6b0 [ 1808.972570] ? __dev_change_flags+0x4cf/0x6e0 [ 1808.973527] ? dev_set_allmulti+0x30/0x30 [ 1808.974455] ? lock_acquire+0x197/0x470 [ 1808.975301] ? full_name_hash+0xb5/0xf0 [ 1808.976153] dev_change_flags+0x100/0x160 [ 1808.977044] dev_ifsioc+0x5b9/0xa00 [ 1808.977833] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1808.978950] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1808.980073] dev_ioctl+0x23c/0xd30 [ 1808.980826] sock_do_ioctl+0x17d/0x300 [ 1808.981647] ? compat_ifr_data_ioctl+0x180/0x180 [ 1808.982669] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1808.983885] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1808.984977] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1808.986098] ? generic_block_fiemap+0x60/0x60 [ 1808.987049] ? lock_downgrade+0x6d0/0x6d0 [ 1808.987937] sock_ioctl+0x3ef/0x710 [ 1808.988712] ? dlci_ioctl_set+0x30/0x30 [ 1808.989558] ? selinux_file_ioctl+0xb6/0x270 [ 1808.990494] ? dlci_ioctl_set+0x30/0x30 [ 1808.991336] __x64_sys_ioctl+0x19a/0x210 [ 1808.992202] do_syscall_64+0x33/0x40 [ 1808.992991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1808.994085] RIP: 0033:0x7fe192ab9b19 [ 1808.994872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.998802] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.000415] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1809.001937] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1809.003444] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1809.004953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.006465] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:25:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600", 0x23}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000005c0)='{N$\x0f[\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\xd6\xf3\xf3\x03\x8da7\xa6\x95\x85\xbc\xfc\xae%~V\x8c\x90C\x13\xba\x1c0q3\tET(_\xa8\xbb\x9c\xd9e\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000000)="a3", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r2}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolve\xc8C', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000001) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000580)={0x92, 0x1, 0x3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:29 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6d6b646f736617e43c00088020000200000004f80001", 0x18}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:29 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5411, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1809.284701] FAULT_INJECTION: forcing a failure. [ 1809.284701] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.287264] CPU: 1 PID: 10199 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1809.288713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.290456] Call Trace: [ 1809.291019] dump_stack+0x107/0x167 [ 1809.291789] should_fail.cold+0x5/0xa [ 1809.292600] should_failslab+0x5/0x20 [ 1809.293412] __kmalloc_node_track_caller+0x74/0x3b0 [ 1809.294469] ? inet6_ifa_notify+0x11d/0x230 [ 1809.295382] __alloc_skb+0xb1/0x5b0 [ 1809.296153] inet6_ifa_notify+0x11d/0x230 [ 1809.297022] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1809.297975] __ipv6_ifa_notify+0x180/0xaa0 [ 1809.298862] ? modify_prefix_route+0x530/0x530 [ 1809.299844] ? __local_bh_enable_ip+0x9d/0x100 [ 1809.300810] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1809.301823] ? addrconf_dad_run+0x180/0x180 [ 1809.302730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1809.303852] addrconf_notify+0x161/0x2390 [ 1809.304723] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1809.305939] ? tun_device_event+0x71/0x1160 [ 1809.306841] ? mark_held_locks+0x9e/0xe0 [ 1809.307707] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1809.308793] ? inet6_ifinfo_notify+0x150/0x150 [ 1809.309750] ? failover_register+0x530/0x530 [ 1809.310683] raw_notifier_call_chain+0xb3/0x110 [ 1809.311663] call_netdevice_notifiers_info+0xba/0x130 [ 1809.312743] __dev_notify_flags+0x1de/0x2c0 [ 1809.313647] ? dev_change_name+0x6b0/0x6b0 [ 1809.314560] ? __dev_change_flags+0x4cf/0x6e0 [ 1809.315500] ? dev_set_allmulti+0x30/0x30 [ 1809.316369] ? full_name_hash+0xb5/0xf0 [ 1809.317216] dev_change_flags+0x100/0x160 [ 1809.318127] dev_ifsioc+0x5b9/0xa00 [ 1809.318910] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1809.320021] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1809.321126] dev_ioctl+0x23c/0xd30 [ 1809.321884] sock_do_ioctl+0x17d/0x300 [ 1809.322697] ? compat_ifr_data_ioctl+0x180/0x180 [ 1809.323693] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1809.324889] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1809.325976] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1809.327069] ? generic_block_fiemap+0x60/0x60 [ 1809.328013] ? lock_downgrade+0x6d0/0x6d0 [ 1809.328909] sock_ioctl+0x3ef/0x710 [ 1809.329672] ? dlci_ioctl_set+0x30/0x30 [ 1809.330519] ? selinux_file_ioctl+0xb6/0x270 [ 1809.331446] ? dlci_ioctl_set+0x30/0x30 [ 1809.332279] __x64_sys_ioctl+0x19a/0x210 [ 1809.333133] do_syscall_64+0x33/0x40 [ 1809.333917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1809.335005] RIP: 0033:0x7fe192ab9b19 [ 1809.335809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1809.339761] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.341392] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1809.342922] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1809.344450] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1809.345990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.347524] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:25:29 executing program 1: mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) dup3(r0, r0, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) mlock2(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0) pkey_free(0xffffffffffffffff) r2 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) perf_event_open(&(0x7f0000000040)={0xa5e881499236bd6b, 0x80, 0x6, 0x6, 0x6, 0x4, 0x0, 0x96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xee5, 0x2, @perf_config_ext={0xf525, 0x3f}, 0x8010, 0x80000001, 0x3, 0x1, 0x7, 0x1, 0xb800, 0x0, 0x3, 0x0, 0x80}, r2, 0x3, r4, 0x9) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0xffffffffffffffff) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) 22:25:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8923, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:29 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:45 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:45 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600", 0x23}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000005c0)='{N$\x0f[\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\xd6\xf3\xf3\x03\x8da7\xa6\x95\x85\xbc\xfc\xae%~V\x8c\x90C\x13\xba\x1c0q3\tET(_\xa8\xbb\x9c\xd9e\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000000)="a3", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r2}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolve\xc8C', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000001) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000580)={0x92, 0x1, 0x3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:45 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891d, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:45 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x541b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1824.830161] FAULT_INJECTION: forcing a failure. [ 1824.830161] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.831757] CPU: 1 PID: 10248 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1824.832642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1824.833709] Call Trace: [ 1824.834057] dump_stack+0x107/0x167 [ 1824.834519] should_fail.cold+0x5/0xa [ 1824.835004] ? create_object.isra.0+0x3a/0xa20 [ 1824.835599] should_failslab+0x5/0x20 [ 1824.836085] kmem_cache_alloc+0x5b/0x310 [ 1824.836611] create_object.isra.0+0x3a/0xa20 [ 1824.837174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1824.837825] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1824.838484] ? inet6_ifa_notify+0x11d/0x230 [ 1824.839036] __alloc_skb+0xb1/0x5b0 [ 1824.839508] inet6_ifa_notify+0x11d/0x230 [ 1824.840041] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1824.840608] __ipv6_ifa_notify+0x180/0xaa0 [ 1824.841156] ? modify_prefix_route+0x530/0x530 [ 1824.841739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1824.842426] ? __local_bh_enable_ip+0x9d/0x100 [ 1824.843017] addrconf_ifdown.isra.0+0xb9e/0x15f0 [ 1824.843636] ? addrconf_dad_run+0x180/0x180 [ 1824.844184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1824.844868] addrconf_notify+0x161/0x2390 [ 1824.845400] ? sel_netif_netdev_notifier_handler+0x19e/0x480 [ 1824.846140] ? tun_device_event+0x71/0x1160 [ 1824.846687] ? mark_held_locks+0x9e/0xe0 [ 1824.847202] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1824.847862] ? inet6_ifinfo_notify+0x150/0x150 [ 1824.848437] ? failover_register+0x530/0x530 [ 1824.849017] raw_notifier_call_chain+0xb3/0x110 [ 1824.849617] call_netdevice_notifiers_info+0xba/0x130 [ 1824.850295] __dev_notify_flags+0x1de/0x2c0 [ 1824.850849] ? dev_change_name+0x6b0/0x6b0 [ 1824.851387] ? __dev_change_flags+0x4cf/0x6e0 [ 1824.851967] ? dev_set_allmulti+0x30/0x30 [ 1824.852499] ? lock_acquire+0x197/0x470 [ 1824.852999] ? full_name_hash+0xb5/0xf0 [ 1824.853510] dev_change_flags+0x100/0x160 [ 1824.854044] dev_ifsioc+0x5b9/0xa00 [ 1824.854508] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1824.855169] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1824.855838] dev_ioctl+0x23c/0xd30 [ 1824.856294] sock_do_ioctl+0x17d/0x300 [ 1824.856785] ? compat_ifr_data_ioctl+0x180/0x180 [ 1824.857393] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1824.858133] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1824.858795] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1824.859458] ? generic_block_fiemap+0x60/0x60 [ 1824.860030] ? lock_downgrade+0x6d0/0x6d0 [ 1824.860559] sock_ioctl+0x3ef/0x710 [ 1824.861028] ? dlci_ioctl_set+0x30/0x30 [ 1824.861537] ? selinux_file_ioctl+0xb6/0x270 [ 1824.862121] ? dlci_ioctl_set+0x30/0x30 [ 1824.862633] __x64_sys_ioctl+0x19a/0x210 [ 1824.863164] do_syscall_64+0x33/0x40 [ 1824.863641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1824.864296] RIP: 0033:0x7fe192ab9b19 [ 1824.864776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1824.867113] RSP: 002b:00007fe19002f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.868068] RAX: ffffffffffffffda RBX: 00007fe192bccf60 RCX: 00007fe192ab9b19 [ 1824.868971] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 1824.869865] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1824.870784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.871677] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:25:45 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xff0f, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001d00210c000000000036cc1e9d7ee592606e0000040002007b9b7bd3353790138f753d69b09700c1b72ff0c845e35c270a16d89c78cbde2a523c78fc"], 0x14}}, 0x0) 22:25:45 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8927, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:45 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5421, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891e, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:45 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8929, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x4, 0xc703742902c97159, @fd_index=0x2, 0xfffffffffffffffc, 0x0, 0xfffffeff, 0x1, 0x0, {0x3, r9}}, 0x7fffffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:25:45 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 16) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:25:45 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:25:45 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891f, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x10080, 0x4) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="174a85175a38f1c1ad55bd09", 0xc}], 0x1, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x87, 0x8, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x26, "71638f428fc8d5fee719bec58c3b4dbf4b594ffe5fed74b7758a28b49a3584b7a8228a569928"}, @hao={0xc9, 0x10, @private0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x6, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xfc}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0xb88}, @enc_lim={0x4, 0x1, 0xc1}]}}}], 0xd0}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x7, @empty, 0x101}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="792f2d364cc0c0c734f05a3b7a99766448dd966302ca5a8702ff25eb81a336ff83634a0f93a36ae4789159e27b2df0fbbe3f05eda6dab53bb2ddecdebd27a0c2835439ef33ed2ee9843e65c6c62dfc7f8861d459666f3ebdd01c3b839d166c5a2fe9dc4c462d528f3644774216a413cec549c2ad2db10a3f7a6c48cb9225d6dbd6d72d2a85d02d7ecdbe8a4d851157838762c064f28c6bc58fd1d08c515e357904451de49a4489ef8cb0446c0a2adcb6942fdeea657e61b7f86b03a0f14989eb1459cf31af07a0adf95f83ecc91d97f551cb7c87fc8815e339", 0xd9}, {&(0x7f00000003c0)="70a6c74f432e6bfb99d62b5a2893cc3565b2d9a2059270a54ec20eee0da4ee079a19bb68a121", 0x26}, {&(0x7f0000000400)="393b499fe3b6f137c817ab2fd07d5b8f99284100f692eda3677d0ae801c7aeb3b8265cda51253f26a675f1319e02fe514be99ee9d102325babd66daca2f5918dda9e9fbe0bd622aadcc41fa816b5a772dff9d86520b939fbfdbe100ffe9e3d0afd70", 0x62}, {&(0x7f0000000580)="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", 0xff}], 0x4, &(0x7f0000000680)=[@rthdrdstopts={{0x148, 0x29, 0x37, {0x3b, 0x26, '\x00', [@generic={0xd2, 0xff, "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"}, @generic={0x4, 0x15, "592fc160c425d912351cf0b195f9aea6a006cde056"}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x160}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x7fffffff, @mcast1, 0x1ff}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000800)="c312cbc2c5bca0d6fc0899ebda874e27f681b200477cee2538c0715ea06b630d661e363fbc2f2f730896569a9b6331d41ddc9fb47548ee576f414c004eb6ad237b900eff166bafb13bb97313d5fa8277e2ff12ea0b861fc26b4850bc85d3f46ecb038be2b9f85fce5cf5c0bad98b15fa836bba9f06f7f91c60bfee5759ad16058b72491eb730c3dd7f0c6228c941ff6301e7560ca6e2a51acfab464e9bccef6db6d4193e3dc806a3dc71d19571268f11579b056aa3d8353ba95c6b578bd4046de5ea8bbd6488a9d4bc1af469340c73eeb3e549e988eda3e645a045299a2db5cb3a9d761e2d668e8b1fcb7d6947d66967648cfa4a6f", 0xf5}, {&(0x7f0000000900)="c205876fa7ac23fbae1284092af02d2be61ff23fb1a3dff275ba097c171ad9cfcc8117d5411228989b99b67ab48a43f6f0a2a87c4e72f5f1da7202a97bf80d16be33556d27eaafb928e78d8570d884e0883548822ac3052b89f89451dad95b3b69b3d78607850b0d681daaa287a108d514bad3583389b1836abeb6c95acc5a76742f080560d967a187d6e437daea71506dbc356bf270db8cadfc0cf394412ba2b4e148ef321eaf9ba8fc8b0c80557aceaae0be618ae97c17e84c0081b4e31ea7aa3dd1927662dfe5101faf0e78336d4f7ef1ef492e61f4222b72b3052c593229ed47", 0xe2}, {&(0x7f0000000a00)="0aa6e76d364113c7caa3a615f8deab7b7963b74c33e2ee2578da001fc015083a50b6bcdf499bc67a4b341456692ae31ba6477478f91a395d3f4a5ced46e31718c3d9fbe3274f032abdbadf9dadd72843f3f6a151badfe0d2f5a8a89e791868aae820449d4f959ac42914e5d56e7fcdbdb036bb508cb0ddaa373831d22dfb5cbc1db9c93e55bb590d7aaf5744039eb20e55ad028e1b1ef21f75c64095851974c4979717a2a0fd73f8", 0xa8}], 0x3, &(0x7f0000000b00)=[@hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x29, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x1f}]}}}, @rthdr={{0x48, 0x29, 0x39, {0xc, 0x6, 0x2, 0x1, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x34}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0xf8}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @hopopts={{0x58, 0x29, 0x36, {0x0, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x2, [0x0, 0x5, 0xf9f, 0x7, 0x5, 0x50b0497d]}}]}}}, @hoplimit={{0x14}}, @rthdr={{0x68, 0x29, 0x39, {0xc, 0xa, 0x0, 0x2, 0x0, [@mcast2, @mcast1, @private0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts={{0x78, 0x29, 0x36, {0x84, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x2, 0x2, 0x20, 0x7, [0x1d48]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0xfff8, [0xffffffff]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}], 0x240}}], 0x3, 0x20004040) [ 1825.370842] FAULT_INJECTION: forcing a failure. [ 1825.370842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.373678] CPU: 0 PID: 10296 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1825.375303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1825.377080] Call Trace: [ 1825.377657] dump_stack+0x107/0x167 [ 1825.378446] should_fail.cold+0x5/0xa [ 1825.379266] _copy_to_user+0x2e/0x180 [ 1825.380087] simple_read_from_buffer+0xcc/0x160 [ 1825.381084] proc_fail_nth_read+0x198/0x230 [ 1825.382030] ? proc_sessionid_read+0x230/0x230 [ 1825.383006] ? security_file_permission+0xb1/0xe0 [ 1825.384050] ? proc_sessionid_read+0x230/0x230 [ 1825.385029] vfs_read+0x228/0x620 [ 1825.385782] ksys_read+0x12d/0x260 [ 1825.386558] ? vfs_write+0xb10/0xb10 [ 1825.387364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1825.388496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1825.389609] do_syscall_64+0x33/0x40 [ 1825.390414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1825.391514] RIP: 0033:0x7fe192a6c69c [ 1825.392313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1825.396285] RSP: 002b:00007fe19002f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1825.397933] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe192a6c69c [ 1825.399457] RDX: 000000000000000f RSI: 00007fe19002f1e0 RDI: 0000000000000005 [ 1825.400984] RBP: 00007fe19002f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1825.402518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1825.404035] R13: 00007ffd1443136f R14: 00007fe19002f300 R15: 0000000000022000 22:25:45 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:02 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8920, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:02 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5450, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:02 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000340)={0x17, 0x0, {0x8, @struct={0x4, 0x7}, 0x0, 0x40, 0x80000001, 0x7, 0x5021, 0x3, 0x6, @usage=0x1000, 0x9, 0x7, [0x6, 0x9, 0x100000001, 0x9, 0x1, 0xfffffffffffffff7]}, {0x5, @struct={0x0, 0x6}, 0x0, 0x970, 0x400, 0xfa, 0x40, 0x2, 0x0, @struct={0x4, 0xfff}, 0x7fffffff, 0x5, [0x9, 0x8, 0x6, 0x3, 0x5, 0x100000001]}, {0xfffffffffffffff8, @struct={0xba, 0x6}, 0x0, 0x9, 0x5, 0xd84a, 0x2, 0xfffffffffffffffc, 0x404, @struct={0x6, 0xa3}, 0xf6e5, 0x10000, [0x5, 0x3, 0x9, 0x1, 0x3, 0x10001]}, {0xc05, 0x10000, 0x12}}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xe0, 0x5, 0x5, 0x1, 0x0, 0x8, 0x400, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xd9a6, 0x2}, 0x48, 0xef23, 0x2, 0x9, 0xfffffffffffffff9, 0x7, 0x2, 0x0, 0x6eda9b66, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r3, 0x3) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) 22:26:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0)) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x80, &(0x7f0000000200)) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x200000, 0x16, 0x0, 0x802000, &(0x7f0000000880)=ANY=[@ANYRESDEC]) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x7, 0x204200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/255, 0xff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0/../file0/file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32=0x3}, @nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, @nested={0x4, 0xd}]}, 0x28}}, 0x0) getdents64(r4, &(0x7f0000000140)=""/255, 0xff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/118, 0xffffffffffffff5f}, {&(0x7f0000000800)=""/124, 0x7c}], 0x2}, 0x40002141) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/../file0\x00']) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='mqueue\x00', 0x20002, 0x0) 22:26:02 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:02 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2103000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:02 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1517f, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:02 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8930, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1842.351063] loop2: detected capacity change from 0 to 135266304 [ 1842.440317] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue 22:26:02 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8921, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0)) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x80, &(0x7f0000000200)) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x200000, 0x16, 0x0, 0x802000, &(0x7f0000000880)=ANY=[@ANYRESDEC]) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x7, 0x204200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/255, 0xff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0/../file0/file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32=0x3}, @nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, @nested={0x4, 0xd}]}, 0x28}}, 0x0) getdents64(r4, &(0x7f0000000140)=""/255, 0xff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/118, 0xffffffffffffff5f}, {&(0x7f0000000800)=""/124, 0x7c}], 0x2}, 0x40002141) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/../file0\x00']) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='mqueue\x00', 0x20002, 0x0) 22:26:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000100)=""/23, 0x17}], 0x8) open_by_handle_at(r1, &(0x7f0000000080)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x8, 0x80, 0x2, 0x0, 0x7}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window, @timestamp, @window, @timestamp], 0x20000044) 22:26:03 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5451, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1842.702264] loop2: detected capacity change from 0 to 135266304 [ 1842.767251] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue 22:26:19 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x8004) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:26:19 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:19 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0)) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x80, &(0x7f0000000200)) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x200000, 0x16, 0x0, 0x802000, &(0x7f0000000880)=ANY=[@ANYRESDEC]) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x7, 0x204200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/255, 0xff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0/../file0/file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32=0x3}, @nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, @nested={0x4, 0xd}]}, 0x28}}, 0x0) getdents64(r4, &(0x7f0000000140)=""/255, 0xff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/118, 0xffffffffffffff5f}, {&(0x7f0000000800)=""/124, 0x7c}], 0x2}, 0x40002141) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/../file0\x00']) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='mqueue\x00', 0x20002, 0x0) 22:26:19 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:19 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:19 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7f51010000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:19 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5452, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1858.739715] loop2: detected capacity change from 0 to 135266304 22:26:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800005bdf87399f088209ee1e3e3ecd799ab580d9692a4c3dc12b855173ed2e9f93fc3bbf050c4209bdfb1544969b27bcd01a38a4e5ebe04dd1e1d7fb6705f297087dcbcd7675253395329744739d96eda915556e9429c80f9e751f0785770941bc9521b15d8570b89784466152c6f1968c71182f1305181a06216e1c41c8a9854888a3a905fbaae49510319bec010d4dd1c4b683c289630df03c198c62f0c2"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRESDEC]) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0x884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@mcast1}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000280)={@empty, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', r4, 0x2f, 0x1, 0xe4, 0x1, 0x10, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x2, 0x5}}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0) 22:26:19 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1858.813118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1858.817326] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue 22:26:19 executing program 2: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) [ 1858.858730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10401 comm=syz-executor.1 [ 1858.877085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.877979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.878938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1858.899728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1858.901975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10421 comm=syz-executor.1 [ 1858.920482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.921326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.922241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:26:19 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:19 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8923, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:19 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000b, r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001800010000000000000000000a00004008000008", @ANYRES64, @ANYBLOB="104bc52f3e574d9569e3"], 0x54}, 0x1, 0x0, 0x0, 0x4401}, 0x0) 22:26:19 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1859.085254] : renamed from lo 22:26:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r1) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x9, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="bb60c19dba4b8b3d98e8e021afd19d9ea9e2806964897c81c15d76c6c5d9be71b4a47eab8cee10ce36cb86fe80ed2f1b251ae420a80c6747c147debf9687090a5d6e5a601e5fde2bf2ac8399e351de257933", 0x52, 0x4}], 0x810004, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c2c5bf22c636f6e746578743d73797374656d5f752c61756469742c636f6e746578743d756e636f6e87ffa7f8e570820b666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB="03667363e4a2752e007bbb18a7b0a02c0f1761fef9ecd986f353"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) 22:26:33 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5460, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:33 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:33 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:33 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8936, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:33 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:33 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:33 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b47, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:33 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x44000, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="ba1594de83b92ab53fbcc2a0c741f077c65f8d2a3bf21e21730fb56597765e1cda973be33356aa49c4d709baacdf4c4c700f4300339b77519c520f30b64cc65e32345a1b67fa1928c7f158f293179918d910e94c8de89077970548ea10a797383a429aafc7b9f8e354b705dde3e95c9caa927c22f40932113666e81659a13ae5c3e7abfe85aad875a62a532d5d824e71281a4bc2cfc607c626cd4dea9fcdb3e4b322632c14957eabb2833a31a34a2b33883373a9deead538e2a2a722930db4000000000000000000000000000000b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9ab2b9a1a79a6618f4a4c6410eb3f14102df8661a0fc3b63339a20234043a49f242e9fde3391c855044742202377db70d08d228d9d2299e94c21dfc8e63635ac2ea9ab1cd81c3690eb45f0bc14e7a68884807d5d075a255f7c43", @ANYBLOB="e7298ed27ee0f98997547f9d46d61568017e51169d1dc36b947e2a2d146b01d9122730a7061a716e370ef259d08ca81dbbe1f20cd2fd65bc645a5593a60b8f0e28c7ed7f82d67cc6e5562f20c2d8bf70ce35e0edbb0002000000000000fed72b6c6e888170348337880ff01d950b56c20100c59ae923795ae90cef2837473c9a0a"], 0x54, 0x1) pwrite64(r3, 0x0, 0x0, 0x80000001) socket$inet(0x2, 0x800, 0x2000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000240)='./file1\x00', 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x40000000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa001, 0x10) sendfile(r1, r2, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x6, 0x10000, 0x4, 0x8001, 0x80000000}) 22:26:33 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:33 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:33 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:33 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4b49, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:34 executing program 2: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) syz_io_uring_setup(0x6cc4, &(0x7f00000002c0)={0x0, 0xa40d, 0x20, 0x1, 0x29f, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r2}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000800)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2004, @fd, 0xba, 0x0, 0xfffffffc, 0x2, 0x1, {0x2, r2}}, 0x3c7f) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) syz_io_uring_setup(0x3708, &(0x7f00000005c0)={0x0, 0x957c, 0x10, 0x3, 0x288}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r4 = open_tree(r3, &(0x7f0000000340)='./file0\x00', 0x8100) syz_io_uring_setup(0x3fa0, &(0x7f00000004c0)={0x0, 0x9043, 0x20, 0x1, 0x22c, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x10f, 0x18, 0x3, 0x8, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x6a1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='ip_vti0\x00', 0x1f, 0x80, 0x6}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001d00210c00000000000000000429ce3f00020014001180809801a7b0c7dba067c48642860d6156672029be293798be385cf693bc682615fbebc86ee166f9f7db688ef8b6ad7b326649202b5a9b3d4ab3cefd2457ad9454f0d19ad28210d1cf7f48ace652f8e9af0062a66433a3dcd0e1aa1ce2e2dc66882c409ee7d8a4ff5e74b03a35e2235e6d81a042bc2b689f8ca31bb03fa92c519d0a143e1f446d331951215e04865614e2059587c97bd000306b5417c9ac08bcc3a958477bd81c0c434af68036", @ANYRES32=r5, @ANYBLOB="14000000fe8000000000000000000000000000bb"], 0x48}}, 0x0) 22:26:34 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfbffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:34 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8940, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:34 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100d44666b3ecea3c0b88f5f08f2671ea000018000000d9998f6b0c2b9c01aab8e18bc6078df97f492f2a034323165511890cef7753108982c6a8fe0953a10900000000000000248e368493150700000018d982c077ea998dfdcb262aa22d177c9327", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='n/file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800005bdf87399f088209ee1e3e3ecd799ab580d9692a4c3dc12b855173ed2e9f93fc3bbf050c4209bdfb1544969b27bcd01a38a4e5ebe04dd1e1d7fb6705f297087dcbcd7675253395329744739d96eda915556e9429c80f9e751f0785770941bc9521b15d8570b89784466152c6f1968c71182f1305181a06216e1c41c8a9854888a3a905fbaae49510319bec010d4dd1c4b683c289630df03c198c62f0c2ea0e56"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"/823]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = fsmount(r5, 0x1, 0x73) dup2(r4, r6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x35, 0x7, 0x9, 0xff, 0x0, 0x7fffffff, 0xb27, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10000, 0x6, 0x5e0a, 0x8, 0x4, 0x7, 0x3, 0x0, 0xff, 0x0, 0x4}, 0x0, 0x7, r0, 0x3) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) dup(0xffffffffffffffff) [ 1873.675785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:26:34 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:34 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8927, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 1873.742900] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 22:26:34 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5411, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1873.762149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1873.953892] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 22:26:48 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8929, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:26:48 executing program 2: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) syz_io_uring_setup(0x6cc4, &(0x7f00000002c0)={0x0, 0xa40d, 0x20, 0x1, 0x29f, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r2}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000800)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2004, @fd, 0xba, 0x0, 0xfffffffc, 0x2, 0x1, {0x2, r2}}, 0x3c7f) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) syz_io_uring_setup(0x3708, &(0x7f00000005c0)={0x0, 0x957c, 0x10, 0x3, 0x288}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r4 = open_tree(r3, &(0x7f0000000340)='./file0\x00', 0x8100) syz_io_uring_setup(0x3fa0, &(0x7f00000004c0)={0x0, 0x9043, 0x20, 0x1, 0x22c, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x10f, 0x18, 0x3, 0x8, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x6a1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='ip_vti0\x00', 0x1f, 0x80, 0x6}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001d00210c00000000000000000429ce3f00020014001180809801a7b0c7dba067c48642860d6156672029be293798be385cf693bc682615fbebc86ee166f9f7db688ef8b6ad7b326649202b5a9b3d4ab3cefd2457ad9454f0d19ad28210d1cf7f48ace652f8e9af0062a66433a3dcd0e1aa1ce2e2dc66882c409ee7d8a4ff5e74b03a35e2235e6d81a042bc2b689f8ca31bb03fa92c519d0a143e1f446d331951215e04865614e2059587c97bd000306b5417c9ac08bcc3a958477bd81c0c434af68036", @ANYRES32=r5, @ANYBLOB="14000000fe8000000000000000000000000000bb"], 0x48}}, 0x0) 22:26:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfeffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:49 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8941, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:49 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x8000, 0x4) 22:26:49 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:49 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x541b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:49 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8902, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:49 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5421, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:49 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5411, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:26:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:26:49 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8903, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1888.727951] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 22:26:49 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8904, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 22:27:04 executing program 1: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x51502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="50009dc1", @ANYRES16=0x0, @ANYBLOB="000824bd7000fddbdf256b0000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e24, 0x1, @remote, 0x40}, 0x1c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT]) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbf}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendfile(r1, r5, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 22:27:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:04 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8930, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:27:04 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5450, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8943, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 1: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file1\x00', 0x800, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) statx(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x10, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x40040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010000000000000000000000000006862520e65500040000000000a600000df377ed2bc13762b7a60ff6cb1266f307daeee7df7c09a5c9f1f72d3978da6aa0914494c4f06fc7773c26002775d85988bc4a"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 22:27:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8946, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1904.237913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:27:04 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5451, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 22:27:05 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:05 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:27:05 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8948, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:05 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 22:27:05 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5452, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:05 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) 22:27:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) statx(0xffffffffffffffff, 0x0, 0x1000, 0x7ff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101140, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3", 0x1}], 0x1}, 0x10044001) recvmmsg(r1, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000011, 0x33, r2, 0x8000000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x302, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2) 22:27:21 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x21030000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:21 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x5460, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:21 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:21 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:21 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:27:21 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 1921.302066] kauditd_printk_skb: 3269 callbacks suppressed [ 1921.302082] audit: type=1400 audit(1752013641.762:3328): avc: denied { tracepoint } for pid=10733 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:27:21 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) 22:27:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x181) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r1, &(0x7f0000002480)=[{&(0x7f0000000240)="37bf1ead4c2c143cfc0fa606f670edb13a0909bd689eae720eca9208c55dbb41f6acd6385d30ac09aa0ff146e5335282eea5355156609d988b4901ceee68171a47dc7e9119b4b62dd9d5837ee08cf43249b6f349c2d7bb8591e2fe68e4d71f6c8b2f9dd046e79e075863887a844a0870482072ddeda42d8d319aad91067f8d6c66e3cdf6064dffe3b19af7b6c77c005195864a49efaa3033d012c64f77aa97eec097571261a45059392e3745d57f0229934a331ff33ecdb66c61afed28a9276a0e68a9491b802fe4", 0xc8}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000001340)="c958292cf0f5b53df71bdc753ce5217cc9b36ef3252b57264b8ae9483ce52e7bf7031dd7d0b521560504eef19287d5ce9896dab4c3784a37b02b9daa78978fe872e77d96cfc442dc7d714a461a7783c02a7a0c6392e82009d045ff9d58b010ab1215fc0af39f5afb866e998c08617ecbf67820475e4a3fa651dc", 0x7a}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="9ea36babb42d429fc9aee068067012c2", 0x10}, {&(0x7f0000002400)="fb0ba5767851a39c2187507c884f927db08d8ca314ad88a0a5e4623fc6e6767a5c152caab4f1b266f200a0b6c9927686ea59f8fa9f026a6148bafb6c798ad29104d3488d9a49784d4ef6846c37f5f196b9f47d5be4f02c7c642040b364db2f1465ecef", 0x63}], 0x7, 0x6, 0x1, 0x1d) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r2 = fork() r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x3800000, 0x2042) perf_event_open(&(0x7f0000002500)={0x2, 0x80, 0x81, 0xf9, 0x8, 0x8, 0x0, 0x0, 0x10006, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xe, 0x4}, 0x910c, 0x4, 0x1, 0x6, 0x1, 0x1, 0x401, 0x0, 0x10000}, r2, 0xffffffffffffffff, r3, 0x0) 22:27:39 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x7f510100, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:39 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:39 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x894c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:27:39 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8970, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8910, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:27:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:27:39 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:27:39 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:39 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e000000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:27:39 executing program 1: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd30e, r3, &(0x7f0000000080)="3c2eaa93a90111be75367178ce889701b3036d9e698e3ca7d608ddc4e0e0652440521995aced8fd5ec0944ed95bada3750b57788ddde6946dfa462aac71f947499ecfb3a99170eaa02b79774d41d", 0x4e, 0x3, 0x0, 0x1}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ipv6', 0x1000, 0x10) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) io_submit(r0, 0x2, &(0x7f0000000980)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xa002, 0x0) r7 = open_tree(r4, &(0x7f00000008c0)='./file1\x00', 0x1800) timerfd_gettime(r7, &(0x7f0000000900)) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000200)="733b7f10af96fd9977408907caead861213bbb5ccfb1e37e7843fea50761b8d8d4f2db508f8f3127", 0x28}, {&(0x7f00000004c0)="1de9c5f6330184acb1c6f21382ca3ce1e760b2f6b9c2080f3917e0f5241ba434f3224e28c4f05e67d7954ccc0e5ca6f152feef43c9a540ad55f24050d9a3483d84d6f172ff5466502077ca327a40fff1ae5d7ba83cb90198607b9cb47bbd278fdee5e65d5f93c93902f73c365d0405c694798c4048d4dfbcf7332291d5f2f8376bd5002da51ed505ba4906e6fb055a72f1b8ee307f4808596bf27b59ec0a6b", 0x9f}, {&(0x7f0000000240)="960c3d4253997d9cecc74478454070d16f58e920b7", 0x15}, {&(0x7f0000000580)="c4623ca22857d673674d2e76acf4a208342c6a84efc0af0ecb0f5cd8f9ac4392a1d1dec9425abfe8e68ea3dfd70b0ca60ebeaf465080b3338b02a313483b7371beaaf17d18d6bf25afa12906cd2b8d50f0191573db53b95f1d1a9520564dd4b93466d58bc71e1366e9135eb35d7595", 0x6f}, {&(0x7f0000000600)="ba52d0b2bf04aaf248590b270eb9ec4fe0d8eee2999b7f69ed78768800dc3b4f67dd3141f7e3998e9dd70a21b12d8c5454f84c3e1024df9e612d8ecda28390f253ffcc4f70f50ba8a5", 0x49}, {&(0x7f0000000680)="1290be9e55ee7ebd3a18e0d07d85c14e71af226515b307f982a8fd08cf7b40b4d1e283b233092676f9c3926d6d04029f6b0c1ae8cb664ccef2ecc6e4496cece7427fadaa3c7aeabd0ef968700cec8e55ede8ab6c394580ec37b7d88b8d808f42a19097091873c9dd556ae9035f1250818922fce7b0832bed21df7d5a278fdb11a423b5b9c1", 0x85}, {&(0x7f0000000740)="55d0e09a4c1d5a4fa42b1ee4e082a146d8cc83d69aecfcb655c06d4bec271ec54150b6ce84124251d5b02b2a3d676dc3879821128799326d242bdd7ec1fadbd77caadd0c13841468f7bf9c6ac724d794eafa53573edf54c7178f0e63ba777c4e2abcd9cc8f2183bbe8a4400f1f91da339fc31a9960693dc8e48279b40df733bf71bf1ed09904c1291b5f5ccdfbfcdfd1bb2a5caa76be321741b2fffc095ef18bd0741afd5c36cb602c9c14fdf233fad5d4746ccf276f9c631b07c195a6f3f52bb3d94a2678", 0xc5}], 0x7) 22:27:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:00 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8936, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:00 executing program 1: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) poll(&(0x7f0000001580)=[{0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x3001}, {0xffffffffffffffff, 0x20c0}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8300}, {0xffffffffffffffff, 0x1500}, {0xffffffffffffffff, 0x4050}], 0x9, 0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x5963, &(0x7f00000011c0)={0x0, 0x40000, 0x10, 0x1, 0x214}, &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000001300)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r3, 0x9, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001240)=""/190, 0xbe}], 0x2, 0x0, 0x0, {0x0, r5}}, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 22:28:00 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:00 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8902, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8980, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:00 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8911, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8981, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8903, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 1: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) poll(&(0x7f0000001580)=[{0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x3001}, {0xffffffffffffffff, 0x20c0}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8300}, {0xffffffffffffffff, 0x1500}, {0xffffffffffffffff, 0x4050}], 0x9, 0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x5963, &(0x7f00000011c0)={0x0, 0x40000, 0x10, 0x1, 0x214}, &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000001300)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r3, 0x9, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001240)=""/190, 0xbe}], 0x2, 0x0, 0x0, {0x0, r5}}, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 22:28:00 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8912, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8e) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:00 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:00 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8982, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:15 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8940, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:15 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8983, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:15 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8904, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000001c0)={0x4}) getsockopt$sock_int(r3, 0x1, 0x7, 0x0, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x1000002) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c1d60f22b3e670244a6b08cf9b666e144eecb0cc514da9a06bc5b42346b73c04eeb8b37a578ae51ce257cbff2c6c691c949002a45ee36ee2e5c052df10da93f07e71a1f53dc178cfe7aace8041dfbf3b7466fe71dc6e897112bd91ae2abb548e07d2911d3cf1251ae5b23b2db0cdd985fdbd55e6d0b7efea375b800e1d34f2d76b22a0f1d3aa699363308e2b6baf59db256b8f14b7db8aeda481de57eb9d8278d5ce57cbf68a558b93ade", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf256a0000000500d200030000000a000600ffffffffffff00000500d20000000000"], 0x30}}, 0x40001) 22:28:15 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8913, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:15 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:15 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:15 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8990, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8916, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:15 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:16 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x321) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:16 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfbffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:16 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8992, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:16 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8941, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:16 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:28:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 22:28:16 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8993, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:32 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:32 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="766d55aa208965ba9f57f4e4f29d8f586839be3bb52804d0e407afbe670c4f0859dc31ae1c12b283909638303694499a37f677a3b825f575f549e55bfe2e5d9fcb91d4ae0562ca1a22b135158779bb309d5248cbfca550d0cb1bb7cfb5b635e12554321c543e558f1e64876cb46bbc8f90c12ac78753f63d2882a7eb2e314cd472", 0x81}, 0x1, 0x0, 0x0, 0x48010}, 0x1) r2 = gettid() r3 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) clone3(&(0x7f0000001880)={0x8a00280, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x16}, &(0x7f00000007c0)=""/4096, 0x1000, &(0x7f00000017c0)=""/81, &(0x7f0000001840)=[r2, r3, 0x0, 0xffffffffffffffff], 0x4, {r5}}, 0x58) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000680)={{'\x00', 0x2}, {0x1}, 0x1, 0x0, 0x0, &(0x7f00000002c0)='./file1/file0/file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)="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", 0x120, 0x0, &(0x7f0000000480)={0x2, 0x10f, {0x1, 0xc, 0x6, "7d1aaf0e6131", 0xfc, "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"}, 0xc2, "5a6940c65a9d91d22ada2396228465d123ebd71b384b44d85e0be81fcd4124325eac3ae8b0da1eea744fdfd7e29d5e65f515f17934902a5c1633e3009380a27be9a59b1cebffab44115194ae3205bf4081464945dd83dee2a577998f28a97b1cd5e9eec920b1600edc966c895f36fb7be958d52979c3479dc81cfab5286ec95b0c1501f70dc23db92941f7589efdbc99ff3b6098fd228f01d1bb64914694947c6a8b0e4bcc1a5a53471502f71ac37a1a3b70ceb204b3904f1664cd195ebeac8a97d1"}, 0x1dd}) connect(r0, &(0x7f0000000000)=@phonet, 0x80) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x6000, 0xf4, 0x2a}, 0x18) creat(&(0x7f0000000200)='./file1/file0\x00', 0x53) 22:28:32 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:32 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 22:28:32 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfeffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8994, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:32 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 22:28:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8995, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22:28:46 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:46 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xff0f0000, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x860, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0xe7, 0x9, 0x80, 0x0, 0x3, 0x0, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x20, 0x10000}, 0x2, 0x2, 0x3f, 0x7, 0xb4, 0x10001, 0x7, 0x0, 0x66eb, 0x0, 0x2}, r1, 0x4000000000000e, r0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x1f, 0xff, 0x1f, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x801, 0x0, 0x0, 0x1, 0x8001, 0x2c69, 0x400, 0x0, 0x80000000, 0x0, 0x1}, r1, 0xc, 0xffffffffffffffff, 0x8) 22:28:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22:28:46 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:28:46 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8943, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:28:46 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2103) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22:28:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r0, 0x5, 0x13, &(0x7f0000000080)=""/101) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 22:28:46 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:28:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:29:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8946, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:29:03 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891e, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8e00) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:03 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x890c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:03 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:29:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa000, 0x4) 22:29:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:29:03 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8943, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:29:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) 22:29:03 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:03 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8910, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2023.072295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11178 comm=syz-executor.2 22:29:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) 22:29:03 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891f, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:03 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:29:03 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffff7f, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:03 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a3, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2023.260134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11193 comm=syz-executor.2 22:29:18 executing program 1: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x7036, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa00000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r1, r2/1000+60000}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x2, &(0x7f0000000000)) r4 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x20a342) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r4, &(0x7f00000001c0)={0x2}, r3, 0x1, 0x0, 0x1}, 0xc0c8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r5) signalfd4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x43) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)) r6 = fork() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 22:29:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) 22:29:18 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:18 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8948, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:29:18 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8911, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8920, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 2037.771279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11232 comm=syz-executor.2 22:29:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) 22:29:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x40, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"/688]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x10001) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x20103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 22:29:18 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8912, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) 22:29:18 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) 22:29:18 executing program 1: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x2e, 0x1, 0x6}, 0x8}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x5, 0x1, 0x8, 0x0, 0x4, 0x40090, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x6, 0x6}, 0x1021, 0x7fff, 0x7f11a1e1, 0xe, 0x204b, 0x9, 0x3, 0x0, 0x1bf, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r0, 0x3) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x24508) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) 22:29:32 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8913, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:32 executing program 1: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x2e, 0x1, 0x6}, 0x8}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x5, 0x1, 0x8, 0x0, 0x4, 0x40090, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x6, 0x6}, 0x1021, 0x7fff, 0x7f11a1e1, 0xe, 0x204b, 0x9, 0x3, 0x0, 0x1bf, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r0, 0x3) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x24508) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) 22:29:32 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8921, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2052.205738] FAULT_INJECTION: forcing a failure. [ 2052.205738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2052.208264] CPU: 1 PID: 11297 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2052.209974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2052.211729] Call Trace: [ 2052.212304] dump_stack+0x107/0x167 22:29:32 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff0f) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:32 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffffb, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:32 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40087602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 1) 22:29:32 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 2052.213075] should_fail.cold+0x5/0xa [ 2052.213992] _copy_from_user+0x2e/0x1b0 [ 2052.214840] __copy_msghdr_from_user+0x91/0x4b0 [ 2052.215840] ? __ia32_sys_shutdown+0x80/0x80 [ 2052.216795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2052.217893] ? SOFTIRQ_verbose+0x10/0x10 [ 2052.218761] ? __lock_acquire+0xbb1/0x5b00 [ 2052.219668] sendmsg_copy_msghdr+0xa1/0x160 [ 2052.220600] ? do_recvmmsg+0x6d0/0x6d0 [ 2052.221426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2052.222528] ? SOFTIRQ_verbose+0x10/0x10 [ 2052.223380] ? lock_downgrade+0x6d0/0x6d0 [ 2052.224269] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2052.225368] ? SOFTIRQ_verbose+0x10/0x10 [ 2052.226227] ___sys_sendmsg+0xc6/0x170 [ 2052.227054] ? sendmsg_copy_msghdr+0x160/0x160 [ 2052.228040] ? __fget_files+0x2cf/0x520 [ 2052.228899] ? lock_downgrade+0x6d0/0x6d0 [ 2052.229773] ? find_held_lock+0x2c/0x110 [ 2052.230647] ? __fget_files+0x2f8/0x520 [ 2052.231503] ? __fget_light+0xea/0x290 [ 2052.232348] __sys_sendmsg+0xe5/0x1b0 [ 2052.233157] ? __sys_sendmsg_sock+0x40/0x40 [ 2052.234069] ? rcu_read_lock_any_held+0x75/0xa0 [ 2052.235051] ? fput_many+0x2f/0x1a0 [ 2052.235826] ? ksys_write+0x1a9/0x260 [ 2052.236645] ? __ia32_sys_read+0xb0/0xb0 [ 2052.237508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2052.238616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2052.239698] ? trace_hardirqs_on+0x5b/0x180 [ 2052.240628] do_syscall_64+0x33/0x40 [ 2052.241413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2052.242490] RIP: 0033:0x7f52f0b5bb19 [ 2052.243273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2052.247162] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2052.248778] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2052.250285] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2052.251794] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2052.253315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2052.254820] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 [ 2056.036871] kworker/dying (65) used greatest stack depth: 23496 bytes left 22:29:48 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x894c, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:29:48 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4020940d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2068.087793] FAULT_INJECTION: forcing a failure. [ 2068.087793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2068.089223] CPU: 1 PID: 11337 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2068.090040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.090979] Call Trace: [ 2068.091290] dump_stack+0x107/0x167 [ 2068.091716] should_fail.cold+0x5/0xa [ 2068.092168] _copy_from_user+0x2e/0x1b0 [ 2068.092653] iovec_from_user+0x141/0x400 [ 2068.093125] __import_iovec+0x67/0x590 [ 2068.093585] ? __ia32_sys_shutdown+0x80/0x80 [ 2068.094116] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.094735] import_iovec+0x83/0xb0 [ 2068.095167] sendmsg_copy_msghdr+0x131/0x160 [ 2068.095686] ? do_recvmmsg+0x6d0/0x6d0 [ 2068.096143] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.096594] ? lock_downgrade+0x6d0/0x6d0 [ 2068.097046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.097616] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.098084] ___sys_sendmsg+0xc6/0x170 [ 2068.098508] ? sendmsg_copy_msghdr+0x160/0x160 [ 2068.099007] ? __fget_files+0x2cf/0x520 [ 2068.099707] ? lock_downgrade+0x6d0/0x6d0 [ 2068.100185] ? find_held_lock+0x2c/0x110 [ 2068.100651] ? __fget_files+0x2f8/0x520 [ 2068.101092] ? __fget_light+0xea/0x290 [ 2068.101549] __sys_sendmsg+0xe5/0x1b0 [ 2068.101969] ? __sys_sendmsg_sock+0x40/0x40 [ 2068.102463] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.102981] ? fput_many+0x2f/0x1a0 [ 2068.103399] ? ksys_write+0x1a9/0x260 [ 2068.103824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.104472] ? syscall_enter_from_user_mode+0x1d/0x50 22:29:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580, 0x0, 0x0, 0xb9998546a837ad48, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') getpgid(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050000000000"], 0x28}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) r4 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000014c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="52300000000074a9e38eb08c822600002e2f66696c653000"]) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x200, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xa1, 0x80, [@fast_bss_trans={0x37, 0x9b, {0x4, 0x4, "155e82181ebe48d771aff6cbe8b49c04", "3d3bc0b296d6cee2be26d4f724930695886266d185f551b4bb8bc2dc13066a59", "8e032091ee4dc0485336503d46295ef27e8de0f67792ee03b86803696d420b02", [{0x3, 0x2, "a33b"}, {0x2, 0x17, "b9005e4dbeb95f0e9c90ae41f5669304373e1bfb5dd061"}, {0x1, 0x12, "d35dd9c9f28333c2b1637cf44842527fdc7a"}, {0x3, 0x16, "a82b68979c3b67b5c594eef225a27db091028db57eb2"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x75, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xc2, 0x59}}, @cf={0x4, 0x6, {0x0, 0x9, 0x6, 0x30e}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x1f, 0x400}}, @perr={0x84, 0x56, {0x8, 0x6, [@not_ext={{}, @device_a, 0x3, "", 0xc}, @not_ext={{}, @device_a, 0xffff, "", 0x1}, @not_ext={{}, @device_a, 0xfffff84d, "", 0x10}, @ext={{}, @broadcast, 0x0, @device_a, 0x4}, @not_ext={{}, @device_a, 0xffffff80, "", 0x29}, @not_ext={{}, @device_a, 0x200, "", 0x18}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa8, 0x2, "bccbb50c8acf89bc355615c1b7c23527ecdeaf9a3f4668ac2ec755508b4d22a26c8ddaf1e645614962d78f66dde792a1d9d524ae812b49c59b9f026fd82e9893d65a57e414df17b1c8736ec2ee57341110e478292728c524ded03a2748c69592cc1ea86ffb4d9eff2fd115146d7d62323bfa2fa2c89272fdbc70a70a816b36dc17b83ff75642e151268c9281bfa08d15c0ae63ec0cd19dfc5484f86f94dd200adc353bc4"}]}, @NL80211_ATTR_PROBE_RESP={0x9, 0x91, "e7341f8e61"}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x200}, 0x1, 0x0, 0x0, 0x50}, 0x840) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r5}, &(0x7f0000000000)) 22:29:48 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8916, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:48 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 2) 22:29:48 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:48 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffffe, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) [ 2068.105182] ? trace_hardirqs_on+0x5b/0x180 [ 2068.105753] do_syscall_64+0x33/0x40 [ 2068.106157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.106747] RIP: 0033:0x7f52f0b5bb19 [ 2068.107181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.109189] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.110079] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2068.110861] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2068.111694] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.112477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.113250] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:29:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580, 0x0, 0x0, 0xb9998546a837ad48, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') getpgid(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a800000085187c8c19da0cd59d3890743fd5a2080b2062f0c2b62b27b114b3d6f0376a44c3442e5fde663ffeb58d789ee1cffcc647323bb8a36304bedbb76e0ce81c47759564b15165042b8e7fe2e7d85b41c57c904e0fdea5db91ae4fc00e54cd969941c95adbdae32c550129c9e362e2f3cd020cfad7c3fb6ef7924bcaa4ab9fbb99113f9fe9379ec6632a3419d7c9e50a94a10b70a3d06efad5cf89896f02aba27fc181e3b311c51aea82bb666d2d0fee5f0fb8e0f53e26513600c2f3fe3564db27ae3d799be22bb3a146b49f79c661cea1bf007910e18dce95f1aafb074ba108f0a5fb89eacc8816a9e3c94ceb9683374b70dc002d4956cb41c4460b067862b5cbc2", @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050000000000"], 0x28}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) r4 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000014c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="52300000000074a9e38eb08c822600002e2f66696c653000"]) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x200, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xa1, 0x80, [@fast_bss_trans={0x37, 0x9b, {0x4, 0x4, "155e82181ebe48d771aff6cbe8b49c04", "3d3bc0b296d6cee2be26d4f724930695886266d185f551b4bb8bc2dc13066a59", "8e032091ee4dc0485336503d46295ef27e8de0f67792ee03b86803696d420b02", [{0x3, 0x2, "a33b"}, {0x2, 0x17, "b9005e4dbeb95f0e9c90ae41f5669304373e1bfb5dd061"}, {0x1, 0x12, "d35dd9c9f28333c2b1637cf44842527fdc7a"}, {0x3, 0x16, "a82b68979c3b67b5c594eef225a27db091028db57eb2"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x75, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xc2, 0x59}}, @cf={0x4, 0x6, {0x0, 0x9, 0x6, 0x30e}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x1f, 0x400}}, @perr={0x84, 0x56, {0x8, 0x6, [@not_ext={{}, @device_a, 0x3, "", 0xc}, @not_ext={{}, @device_a, 0xffff, "", 0x1}, @not_ext={{}, @device_a, 0xfffff84d, "", 0x10}, @ext={{}, @broadcast, 0x0, @device_a, 0x4}, @not_ext={{}, @device_a, 0xffffff80, "", 0x29}, @not_ext={{}, @device_a, 0x200, "", 0x18}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa8, 0x2, "bccbb50c8acf89bc355615c1b7c23527ecdeaf9a3f4668ac2ec755508b4d22a26c8ddaf1e645614962d78f66dde792a1d9d524ae812b49c59b9f026fd82e9893d65a57e414df17b1c8736ec2ee57341110e478292728c524ded03a2748c69592cc1ea86ffb4d9eff2fd115146d7d62323bfa2fa2c89272fdbc70a70a816b36dc17b83ff75642e151268c9281bfa08d15c0ae63ec0cd19dfc5484f86f94dd200adc353bc4"}]}, @NL80211_ATTR_PROBE_RESP={0x9, 0x91, "e7341f8e61"}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x200}, 0x1, 0x0, 0x0, 0x50}, 0x840) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r5}, &(0x7f0000000000)) 22:29:48 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80086601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:48 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1517f) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 3) 22:29:48 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:29:48 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8923, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2068.286931] FAULT_INJECTION: forcing a failure. [ 2068.286931] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.288293] CPU: 1 PID: 11364 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2068.289071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.290038] Call Trace: [ 2068.290357] dump_stack+0x107/0x167 [ 2068.290794] should_fail.cold+0x5/0xa [ 2068.291242] ? __alloc_skb+0x6d/0x5b0 [ 2068.291695] should_failslab+0x5/0x20 [ 2068.292138] kmem_cache_alloc_node+0x55/0x330 [ 2068.292660] __alloc_skb+0x6d/0x5b0 [ 2068.293077] netlink_sendmsg+0x998/0xe00 [ 2068.293549] ? netlink_unicast+0x800/0x800 [ 2068.294039] ? netlink_unicast+0x800/0x800 [ 2068.294526] __sock_sendmsg+0x154/0x190 [ 2068.294982] ____sys_sendmsg+0x70d/0x870 [ 2068.295449] ? sock_write_iter+0x3d0/0x3d0 [ 2068.295941] ? do_recvmmsg+0x6d0/0x6d0 [ 2068.296401] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.296876] ? lock_downgrade+0x6d0/0x6d0 [ 2068.297364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.297973] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.298443] ___sys_sendmsg+0xf3/0x170 [ 2068.298897] ? sendmsg_copy_msghdr+0x160/0x160 [ 2068.299425] ? __fget_files+0x2cf/0x520 [ 2068.299890] ? lock_downgrade+0x6d0/0x6d0 [ 2068.300377] ? find_held_lock+0x2c/0x110 [ 2068.300847] ? __fget_files+0x2f8/0x520 [ 2068.301307] ? __fget_light+0xea/0x290 [ 2068.301761] __sys_sendmsg+0xe5/0x1b0 [ 2068.302207] ? __sys_sendmsg_sock+0x40/0x40 [ 2068.302706] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.303256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.303860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.304474] ? trace_hardirqs_on+0x5b/0x180 [ 2068.304968] do_syscall_64+0x33/0x40 [ 2068.305397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.305981] RIP: 0033:0x7f52f0b5bb19 [ 2068.306410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.308509] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.309385] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2068.310194] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2068.311003] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.311815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.312633] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:29:48 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580, 0x0, 0x0, 0xb9998546a837ad48, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') getpgid(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050000000000"], 0x28}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) r4 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000014c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="52300000000074a9e38eb08c822600002e2f66696c653000"]) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x200, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xa1, 0x80, [@fast_bss_trans={0x37, 0x9b, {0x4, 0x4, "155e82181ebe48d771aff6cbe8b49c04", "3d3bc0b296d6cee2be26d4f724930695886266d185f551b4bb8bc2dc13066a59", "8e032091ee4dc0485336503d46295ef27e8de0f67792ee03b86803696d420b02", [{0x3, 0x2, "a33b"}, {0x2, 0x17, "b9005e4dbeb95f0e9c90ae41f5669304373e1bfb5dd061"}, {0x1, 0x12, "d35dd9c9f28333c2b1637cf44842527fdc7a"}, {0x3, 0x16, "a82b68979c3b67b5c594eef225a27db091028db57eb2"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x75, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xc2, 0x59}}, @cf={0x4, 0x6, {0x0, 0x9, 0x6, 0x30e}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x1f, 0x400}}, @perr={0x84, 0x56, {0x8, 0x6, [@not_ext={{}, @device_a, 0x3, "", 0xc}, @not_ext={{}, @device_a, 0xffff, "", 0x1}, @not_ext={{}, @device_a, 0xfffff84d, "", 0x10}, @ext={{}, @broadcast, 0x0, @device_a, 0x4}, @not_ext={{}, @device_a, 0xffffff80, "", 0x29}, @not_ext={{}, @device_a, 0x200, "", 0x18}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa8, 0x2, "bccbb50c8acf89bc355615c1b7c23527ecdeaf9a3f4668ac2ec755508b4d22a26c8ddaf1e645614962d78f66dde792a1d9d524ae812b49c59b9f026fd82e9893d65a57e414df17b1c8736ec2ee57341110e478292728c524ded03a2748c69592cc1ea86ffb4d9eff2fd115146d7d62323bfa2fa2c89272fdbc70a70a816b36dc17b83ff75642e151268c9281bfa08d15c0ae63ec0cd19dfc5484f86f94dd200adc353bc4"}]}, @NL80211_ATTR_PROBE_RESP={0x9, 0x91, "e7341f8e61"}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x200}, 0x1, 0x0, 0x0, 0x50}, 0x840) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r5}, &(0x7f0000000000)) 22:29:48 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80087601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:29:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 4) 22:29:48 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8970, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 2068.416817] FAULT_INJECTION: forcing a failure. [ 2068.416817] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.418104] CPU: 0 PID: 11383 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2068.418849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.419737] Call Trace: [ 2068.420026] dump_stack+0x107/0x167 [ 2068.420433] should_fail.cold+0x5/0xa [ 2068.420849] ? create_object.isra.0+0x3a/0xa20 [ 2068.421341] should_failslab+0x5/0x20 [ 2068.421751] kmem_cache_alloc+0x5b/0x310 [ 2068.422191] create_object.isra.0+0x3a/0xa20 [ 2068.422670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.423225] kmem_cache_alloc_node+0x169/0x330 [ 2068.423720] __alloc_skb+0x6d/0x5b0 [ 2068.424133] netlink_sendmsg+0x998/0xe00 [ 2068.424603] ? netlink_unicast+0x800/0x800 [ 2068.425091] ? netlink_unicast+0x800/0x800 [ 2068.425568] __sock_sendmsg+0x154/0x190 [ 2068.426018] ____sys_sendmsg+0x70d/0x870 [ 2068.426485] ? sock_write_iter+0x3d0/0x3d0 [ 2068.426975] ? do_recvmmsg+0x6d0/0x6d0 [ 2068.427432] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.427889] ? lock_downgrade+0x6d0/0x6d0 [ 2068.428375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.428974] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.429452] ___sys_sendmsg+0xf3/0x170 [ 2068.429904] ? sendmsg_copy_msghdr+0x160/0x160 [ 2068.430437] ? __fget_files+0x2cf/0x520 [ 2068.430907] ? lock_downgrade+0x6d0/0x6d0 [ 2068.431376] ? find_held_lock+0x2c/0x110 [ 2068.431848] ? __fget_files+0x2f8/0x520 [ 2068.432331] ? __fget_light+0xea/0x290 [ 2068.432778] __sys_sendmsg+0xe5/0x1b0 [ 2068.433219] ? __sys_sendmsg_sock+0x40/0x40 [ 2068.433713] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.434257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.434852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.435439] ? trace_hardirqs_on+0x5b/0x180 [ 2068.435936] do_syscall_64+0x33/0x40 [ 2068.436373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.436964] RIP: 0033:0x7f52f0b5bb19 [ 2068.437393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.439487] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.440358] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2068.441167] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2068.441975] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.442782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.443592] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:01 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8918, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:01 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:01 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 5) 22:30:01 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2080.817345] FAULT_INJECTION: forcing a failure. [ 2080.817345] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.819031] CPU: 1 PID: 11417 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2080.820010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.821193] Call Trace: [ 2080.821574] dump_stack+0x107/0x167 [ 2080.822083] should_fail.cold+0x5/0xa [ 2080.822620] should_failslab+0x5/0x20 [ 2080.823150] __kmalloc_node_track_caller+0x74/0x3b0 [ 2080.823842] ? netlink_sendmsg+0x998/0xe00 [ 2080.824446] __alloc_skb+0xb1/0x5b0 [ 2080.824956] netlink_sendmsg+0x998/0xe00 [ 2080.825528] ? netlink_unicast+0x800/0x800 [ 2080.826125] ? netlink_unicast+0x800/0x800 [ 2080.826713] __sock_sendmsg+0x154/0x190 [ 2080.827275] ____sys_sendmsg+0x70d/0x870 [ 2080.827843] ? sock_write_iter+0x3d0/0x3d0 [ 2080.828446] ? do_recvmmsg+0x6d0/0x6d0 [ 2080.828995] ? SOFTIRQ_verbose+0x10/0x10 [ 2080.829569] ? lock_downgrade+0x6d0/0x6d0 [ 2080.830150] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.830887] ? SOFTIRQ_verbose+0x10/0x10 [ 2080.831458] ___sys_sendmsg+0xf3/0x170 [ 2080.832007] ? sendmsg_copy_msghdr+0x160/0x160 [ 2080.832670] ? __fget_files+0x2cf/0x520 [ 2080.833243] ? lock_downgrade+0x6d0/0x6d0 [ 2080.833838] ? find_held_lock+0x2c/0x110 [ 2080.834418] ? __fget_files+0x2f8/0x520 [ 2080.834992] ? __fget_light+0xea/0x290 [ 2080.835544] __sys_sendmsg+0xe5/0x1b0 [ 2080.836087] ? __sys_sendmsg_sock+0x40/0x40 [ 2080.836713] ? rcu_read_lock_any_held+0x75/0xa0 [ 2080.837379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.838121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.838844] ? trace_hardirqs_on+0x5b/0x180 [ 2080.839457] do_syscall_64+0x33/0x40 [ 2080.839991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2080.840727] RIP: 0033:0x7f52f0b5bb19 [ 2080.841259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.843845] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2080.844921] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2080.845935] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2080.846944] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.847954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2080.848964] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 6) 22:30:01 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891e, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:01 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8927, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r0}, &(0x7f0000000300)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000100)="443fe715a7fceaa08e151f079d0c5bbf0c7cb80e80c012dc6c4bdf2c7eea88443ec4df37067b15aafd5a191074d133d9694313109fb6221d477cec962e", &(0x7f0000000240)="2d5101672bb9"}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) read(r2, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r1, &(0x7f0000000080)) read(0xffffffffffffffff, &(0x7f0000000540)=""/102, 0x66) timer_delete(0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) timer_gettime(0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000440)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2081.204182] FAULT_INJECTION: forcing a failure. [ 2081.204182] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.205634] CPU: 1 PID: 11452 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2081.206488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.207509] Call Trace: [ 2081.207837] dump_stack+0x107/0x167 [ 2081.208292] should_fail.cold+0x5/0xa [ 2081.208794] ? create_object.isra.0+0x3a/0xa20 [ 2081.209355] should_failslab+0x5/0x20 [ 2081.209826] kmem_cache_alloc+0x5b/0x310 [ 2081.210330] create_object.isra.0+0x3a/0xa20 [ 2081.210870] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2081.211498] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2081.212128] ? netlink_sendmsg+0x998/0xe00 [ 2081.212679] __alloc_skb+0xb1/0x5b0 [ 2081.213142] netlink_sendmsg+0x998/0xe00 [ 2081.213671] ? netlink_unicast+0x800/0x800 [ 2081.214217] ? netlink_unicast+0x800/0x800 [ 2081.214757] __sock_sendmsg+0x154/0x190 [ 2081.215251] ____sys_sendmsg+0x70d/0x870 [ 2081.215769] ? sock_write_iter+0x3d0/0x3d0 [ 2081.216308] ? do_recvmmsg+0x6d0/0x6d0 [ 2081.216818] ? SOFTIRQ_verbose+0x10/0x10 [ 2081.217334] ? lock_downgrade+0x6d0/0x6d0 [ 2081.217863] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.218540] ? SOFTIRQ_verbose+0x10/0x10 [ 2081.219066] ___sys_sendmsg+0xf3/0x170 [ 2081.219569] ? sendmsg_copy_msghdr+0x160/0x160 [ 2081.220152] ? __fget_files+0x2cf/0x520 [ 2081.220667] ? lock_downgrade+0x6d0/0x6d0 [ 2081.221195] ? find_held_lock+0x2c/0x110 [ 2081.221716] ? __fget_files+0x2f8/0x520 [ 2081.222211] ? __fget_light+0xea/0x290 [ 2081.222712] __sys_sendmsg+0xe5/0x1b0 [ 2081.223200] ? __sys_sendmsg_sock+0x40/0x40 [ 2081.223734] ? rcu_read_lock_any_held+0x75/0xa0 [ 2081.224334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.225012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.225671] ? trace_hardirqs_on+0x5b/0x180 [ 2081.226215] do_syscall_64+0x33/0x40 [ 2081.226685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.227338] RIP: 0033:0x7f52f0b5bb19 [ 2081.227807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.230139] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2081.231109] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2081.232013] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2081.232896] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2081.233764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2081.234630] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:01 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8980, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 7) 22:30:01 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0189436, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2081.409821] FAULT_INJECTION: forcing a failure. [ 2081.409821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2081.412385] CPU: 0 PID: 11481 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2081.413842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.415558] Call Trace: [ 2081.416105] dump_stack+0x107/0x167 [ 2081.416882] should_fail.cold+0x5/0xa [ 2081.417688] _copy_from_iter_full+0x201/0xa60 [ 2081.418629] ? __virt_addr_valid+0x170/0x5d0 [ 2081.419546] ? __check_object_size+0x319/0x440 [ 2081.420547] netlink_sendmsg+0x879/0xe00 [ 2081.421394] ? netlink_unicast+0x800/0x800 [ 2081.422289] ? netlink_unicast+0x800/0x800 [ 2081.423174] __sock_sendmsg+0x154/0x190 [ 2081.423999] ____sys_sendmsg+0x70d/0x870 [ 2081.424856] ? sock_write_iter+0x3d0/0x3d0 [ 2081.425752] ? do_recvmmsg+0x6d0/0x6d0 [ 2081.426578] ? SOFTIRQ_verbose+0x10/0x10 [ 2081.427434] ? lock_downgrade+0x6d0/0x6d0 [ 2081.428295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.429427] ? SOFTIRQ_verbose+0x10/0x10 [ 2081.430296] ___sys_sendmsg+0xf3/0x170 [ 2081.431129] ? sendmsg_copy_msghdr+0x160/0x160 [ 2081.432115] ? __fget_files+0x2cf/0x520 [ 2081.432977] ? lock_downgrade+0x6d0/0x6d0 [ 2081.433858] ? find_held_lock+0x2c/0x110 [ 2081.434743] ? __fget_files+0x2f8/0x520 [ 2081.435604] ? __fget_light+0xea/0x290 [ 2081.436451] __sys_sendmsg+0xe5/0x1b0 22:30:01 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc020660b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2081.437264] ? __sys_sendmsg_sock+0x40/0x40 [ 2081.438361] ? rcu_read_lock_any_held+0x75/0xa0 [ 2081.439383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.440524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.441615] ? trace_hardirqs_on+0x5b/0x180 [ 2081.442528] do_syscall_64+0x33/0x40 [ 2081.443334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.444442] RIP: 0033:0x7f52f0b5bb19 [ 2081.445242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.449214] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2081.450851] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2081.452384] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2081.453893] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2081.455387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2081.456924] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 8) 22:30:15 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x891f, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:15 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8929, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:15 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd_index=0x2, 0x9, &(0x7f0000000180)="abb2c6e926bdb6613aba6022df0b3edf463d5a5b6c10839301c345ee23c93392aed4dc9a71e8c1454a82c04852229937df2eb63e25adaea80e1c93dbeb6b1374c32976bba2d597b92a740345668ba7275b66d1f7ff9527495fae30ec5a62180f2fe76327bbd12eda14224f22e8bc92", 0x6f, 0x10, 0x1}, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:15 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:15 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:15 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:15 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8981, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) [ 2095.121025] FAULT_INJECTION: forcing a failure. [ 2095.121025] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.123542] CPU: 1 PID: 11513 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2095.125012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.126754] Call Trace: [ 2095.127320] dump_stack+0x107/0x167 [ 2095.128096] should_fail.cold+0x5/0xa [ 2095.128910] ? __alloc_skb+0x6d/0x5b0 [ 2095.129715] should_failslab+0x5/0x20 [ 2095.130520] kmem_cache_alloc_node+0x55/0x330 [ 2095.131478] __alloc_skb+0x6d/0x5b0 [ 2095.132257] netlink_dump+0x729/0x1070 [ 2095.133089] ? __netlink_kernel_create+0x860/0x860 [ 2095.134130] ? lock_downgrade+0x6d0/0x6d0 [ 2095.135025] __netlink_dump_start+0x62e/0x8e0 [ 2095.135978] rtnetlink_rcv_msg+0x74e/0xbb0 [ 2095.136881] ? do_set_master+0x230/0x230 [ 2095.137747] ? rtnl_fdb_dump+0xa30/0xa30 [ 2095.138602] ? do_set_master+0x230/0x230 [ 2095.139467] ? lock_acquire+0x197/0x470 [ 2095.140303] ? netlink_deliver_tap+0xf4/0xcc0 [ 2095.141277] netlink_rcv_skb+0x14b/0x430 [ 2095.142138] ? rtnl_fdb_dump+0xa30/0xa30 [ 2095.143011] ? netlink_ack+0xab0/0xab0 [ 2095.143832] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2095.144811] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2095.145780] ? is_vmalloc_addr+0x7b/0xb0 [ 2095.146649] netlink_unicast+0x54e/0x800 [ 2095.147520] ? netlink_attachskb+0x870/0x870 [ 2095.148464] netlink_sendmsg+0x90f/0xe00 [ 2095.149341] ? netlink_unicast+0x800/0x800 [ 2095.150248] ? netlink_unicast+0x800/0x800 [ 2095.151142] __sock_sendmsg+0x154/0x190 [ 2095.151983] ____sys_sendmsg+0x70d/0x870 [ 2095.152865] ? sock_write_iter+0x3d0/0x3d0 [ 2095.153756] ? do_recvmmsg+0x6d0/0x6d0 [ 2095.154577] ? SOFTIRQ_verbose+0x10/0x10 [ 2095.155454] ? lock_downgrade+0x6d0/0x6d0 [ 2095.156327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2095.157446] ? SOFTIRQ_verbose+0x10/0x10 [ 2095.158319] ___sys_sendmsg+0xf3/0x170 [ 2095.159145] ? sendmsg_copy_msghdr+0x160/0x160 [ 2095.160123] ? __fget_files+0x2cf/0x520 [ 2095.160975] ? lock_downgrade+0x6d0/0x6d0 [ 2095.161850] ? find_held_lock+0x2c/0x110 [ 2095.162726] ? __fget_files+0x2f8/0x520 [ 2095.163573] ? __fget_light+0xea/0x290 [ 2095.164404] __sys_sendmsg+0xe5/0x1b0 [ 2095.165226] ? __sys_sendmsg_sock+0x40/0x40 [ 2095.166139] ? rcu_read_lock_any_held+0x75/0xa0 [ 2095.167141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.168258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.169355] ? trace_hardirqs_on+0x5b/0x180 [ 2095.170270] do_syscall_64+0x33/0x40 [ 2095.171054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.172149] RIP: 0033:0x7f52f0b5bb19 [ 2095.172957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.176849] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2095.178466] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2095.179968] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2095.181501] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.183018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.184521] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:28 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000014c0)={0x1ec, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x104, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) io_uring_setup(0x259b, &(0x7f0000000200)={0x0, 0x759, 0x20, 0x200, 0x372}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) open(&(0x7f0000000300)='./file0\x00', 0x4000, 0x10d) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) 22:30:28 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x4, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0x4, 0x6, 0x59, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x10, 0x700, 0x11e40000, 0x80000001}}) 22:30:28 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 9) 22:30:28 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8930, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:28 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8982, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:28 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8920, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2108.387858] FAULT_INJECTION: forcing a failure. [ 2108.387858] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.389321] CPU: 1 PID: 11547 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2108.390195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2108.391221] Call Trace: [ 2108.391551] dump_stack+0x107/0x167 [ 2108.392003] should_fail.cold+0x5/0xa [ 2108.392477] ? create_object.isra.0+0x3a/0xa20 [ 2108.393055] should_failslab+0x5/0x20 [ 2108.393526] kmem_cache_alloc+0x5b/0x310 [ 2108.394036] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.394549] create_object.isra.0+0x3a/0xa20 [ 2108.395092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2108.395728] kmem_cache_alloc_node+0x169/0x330 [ 2108.396297] __alloc_skb+0x6d/0x5b0 [ 2108.396764] netlink_dump+0x729/0x1070 [ 2108.397257] ? __netlink_kernel_create+0x860/0x860 [ 2108.397877] ? lock_downgrade+0x6d0/0x6d0 [ 2108.398396] __netlink_dump_start+0x62e/0x8e0 [ 2108.398968] rtnetlink_rcv_msg+0x74e/0xbb0 [ 2108.399496] ? do_set_master+0x230/0x230 [ 2108.399999] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.400517] ? do_set_master+0x230/0x230 [ 2108.401036] ? lock_acquire+0x197/0x470 [ 2108.401544] ? netlink_deliver_tap+0xf4/0xcc0 [ 2108.402109] netlink_rcv_skb+0x14b/0x430 [ 2108.402616] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.403134] ? netlink_ack+0xab0/0xab0 [ 2108.403611] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2108.404185] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2108.404769] ? is_vmalloc_addr+0x7b/0xb0 [ 2108.405301] netlink_unicast+0x54e/0x800 [ 2108.405801] ? netlink_attachskb+0x870/0x870 [ 2108.406346] netlink_sendmsg+0x90f/0xe00 [ 2108.406859] ? netlink_unicast+0x800/0x800 [ 2108.407383] ? netlink_unicast+0x800/0x800 [ 2108.407906] __sock_sendmsg+0x154/0x190 [ 2108.408392] ____sys_sendmsg+0x70d/0x870 [ 2108.408932] ? sock_write_iter+0x3d0/0x3d0 [ 2108.409458] ? do_recvmmsg+0x6d0/0x6d0 [ 2108.409942] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.410445] ? lock_downgrade+0x6d0/0x6d0 [ 2108.410956] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2108.411609] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.412112] ___sys_sendmsg+0xf3/0x170 [ 2108.412594] ? sendmsg_copy_msghdr+0x160/0x160 [ 2108.413164] ? __fget_files+0x2cf/0x520 [ 2108.413658] ? lock_downgrade+0x6d0/0x6d0 [ 2108.414166] ? find_held_lock+0x2c/0x110 [ 2108.414670] ? __fget_files+0x2f8/0x520 [ 2108.415171] ? __fget_light+0xea/0x290 [ 2108.415657] __sys_sendmsg+0xe5/0x1b0 [ 2108.416136] ? __sys_sendmsg_sock+0x40/0x40 [ 2108.416672] ? rcu_read_lock_any_held+0x75/0xa0 [ 2108.417267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2108.417912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2108.418546] ? trace_hardirqs_on+0x5b/0x180 [ 2108.419076] do_syscall_64+0x33/0x40 [ 2108.419541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2108.420175] RIP: 0033:0x7f52f0b5bb19 [ 2108.420636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2108.422913] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2108.423872] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2108.424755] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2108.425624] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.426495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.427365] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:28 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8921, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 10) [ 2108.603958] FAULT_INJECTION: forcing a failure. [ 2108.603958] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.605282] CPU: 1 PID: 11569 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2108.606070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2108.607020] Call Trace: [ 2108.607328] dump_stack+0x107/0x167 [ 2108.607756] should_fail.cold+0x5/0xa [ 2108.608197] should_failslab+0x5/0x20 [ 2108.608634] __kmalloc_node_track_caller+0x74/0x3b0 [ 2108.609212] ? netlink_dump+0x729/0x1070 [ 2108.609680] __alloc_skb+0xb1/0x5b0 [ 2108.610099] netlink_dump+0x729/0x1070 [ 2108.610547] ? __netlink_kernel_create+0x860/0x860 [ 2108.611118] ? lock_downgrade+0x6d0/0x6d0 [ 2108.611596] __netlink_dump_start+0x62e/0x8e0 [ 2108.612116] rtnetlink_rcv_msg+0x74e/0xbb0 [ 2108.612598] ? do_set_master+0x230/0x230 [ 2108.613071] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.613536] ? do_set_master+0x230/0x230 [ 2108.614002] ? lock_acquire+0x197/0x470 [ 2108.614456] ? netlink_deliver_tap+0xf4/0xcc0 [ 2108.614975] netlink_rcv_skb+0x14b/0x430 [ 2108.615442] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.615912] ? netlink_ack+0xab0/0xab0 [ 2108.616354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2108.616889] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2108.617415] ? is_vmalloc_addr+0x7b/0xb0 [ 2108.617884] netlink_unicast+0x54e/0x800 [ 2108.618350] ? netlink_attachskb+0x870/0x870 [ 2108.618860] netlink_sendmsg+0x90f/0xe00 [ 2108.619323] ? netlink_unicast+0x800/0x800 [ 2108.619811] ? netlink_unicast+0x800/0x800 [ 2108.620295] __sock_sendmsg+0x154/0x190 [ 2108.620753] ____sys_sendmsg+0x70d/0x870 [ 2108.621218] ? sock_write_iter+0x3d0/0x3d0 [ 2108.621702] ? do_recvmmsg+0x6d0/0x6d0 [ 2108.622147] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.622604] ? lock_downgrade+0x6d0/0x6d0 [ 2108.623079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2108.623671] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.624135] ___sys_sendmsg+0xf3/0x170 [ 2108.624577] ? sendmsg_copy_msghdr+0x160/0x160 [ 2108.625111] ? __fget_files+0x2cf/0x520 [ 2108.625563] ? lock_downgrade+0x6d0/0x6d0 [ 2108.626034] ? find_held_lock+0x2c/0x110 [ 2108.626503] ? __fget_files+0x2f8/0x520 [ 2108.626961] ? __fget_light+0xea/0x290 [ 2108.627409] __sys_sendmsg+0xe5/0x1b0 [ 2108.627844] ? __sys_sendmsg_sock+0x40/0x40 [ 2108.628331] ? rcu_read_lock_any_held+0x75/0xa0 [ 2108.628887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2108.629481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2108.630073] ? trace_hardirqs_on+0x5b/0x180 [ 2108.630568] do_syscall_64+0x33/0x40 [ 2108.630993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2108.631577] RIP: 0033:0x7f52f0b5bb19 [ 2108.632005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2108.634099] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2108.634960] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2108.635769] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2108.636580] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.637394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2108.638205] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:29 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:29 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:29 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0xae7c, 0x8, &(0x7f0000001900)=[{&(0x7f0000000200)="f8fee66280e2d99aeac2dffdfd3c80b09ec73488cc05fb04d557fc7bb7276823fbc0e6d6b359984967c7d6d66191bfd3e21d67b9e2778503080ad40c9f6ce32f83c9f7821f822750125b8c5521200e29233148b485afb374eda646d7f2619fefac151ccb7c851a32a98084788fbb8a51ef8e02ffcae71401a21b272ce2e358a2a6816913e3ca0d16e7722dd4d191819e1bb94dd0fc1e15a7b5f9ad5f0b0f47", 0x9f, 0x1f}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000002c0)="46b2e26c53ce89dc2a3528c0d8b3a32b12c39da30a91f687ee9496b151ec4dfcdbe81beec3b36e726849360a49a47d9b6e8cc47fae237dfbdbf43c67585e098605fa107c4f4e493855b1efa0c8097202ddd25159e96f30f175e1e7b562fa32dc5e057e8d96358c7979e00381cd881c2dbc942db18985b7a52cfebf8e6586afaa57c2455ac1c45037e77415ef0df40e8b66e79c3b835f030299942407e99cd1a2e4718d758905d732fc79e5edeff3a9d3d85170d4fd2e0d754e6582140dc8ac6eada885b6b6d732fe3a6425698e06e470b737f2b2bdc6b377b67257a59871ba0b72b4e96a0294", 0xe6, 0x6}, {&(0x7f00000003c0)="3c558df04fd2c5e5b4a0e8e0aa0594c0330af8bc113a82157c5b538201bdc8535afb1e53b01141fb68ff3f655089ee7a69df0ec297c551ae08c0f0308140ef45bb2c95c9265035c3cd3da35de886c980b6af27f19c7ef6bd88b1638c79958e8bab66596bada6358f89a44893dbe9db1e612dc4dddbc7f876478a7522b5aca42b861acde432cac241ddb45467664fa32579b72c2e8e", 0x95, 0x7f}, {&(0x7f00000004c0)="150a979e54dd364dc1b499670f5c0049ad18be2b4b35507cc1007389ba2cfacce5f44c478ba0e3bd3569e10e75b1d3397c3bc4b642be495feba8ea4050d988f5e26ed747e462bd296f48797a8e56476c7eb95663a31415d6e840ecc7", 0x5c, 0xaf}, {&(0x7f0000001ac0)="8c2e6ab872905e599fe6f9e64682065874a4fbba80f98179f892057153614593f6cd2b7ed0efed991424d69e899db94eeaeb38b3efb3972ccf18ef5884fd40582f77debc423f15708f9d272bf91d630e633cbcb429d446f242483c1dc39e8276dfc90ed4e3e13b5f84cde52f02e491ad0c4d1afa031965cf7dbc9cc18fc28c3f887b7ed2896cce790ab866fe907983f5b5ff208e75af501d9e9e719848a31525b8f20e825072c8667acb9eb574131da44fedb39c10fed2bcc14ca011b78bc1091d86aa65303064", 0xc7, 0x8}, {&(0x7f00000006c0)="29a6911f70546af55a8856b454060558f173d7ebfbe871608f6c4e98175a691d819fa6a717eb34", 0x27, 0x81}, {&(0x7f00000017c0)="e1ca8ab1505a4843ef61f7647ca0e0ebea553819a4f3be49c35ad385d3e8daf055deaae478f9e98d6fd0df7aa6133affcff33c7c83e25503ed27fe3a8e64a56e0e7085dd9df579a32b4e9f26be87c93f09b20d19e1e151616d3b87aacbbc684eab535d3601a268c9bd279d47ddfd50ce973f87194c23503e34be6142953889fe03e45d1d8f15630358cb1f07ab162a6ed14fd74dcc2cda4a5dfffb4aa8abb9bd0e4c1c0635e45cb253ad062567f14ef7cb07c236e9cb0a01d554df10592960da6d8851f5234226b4", 0xc8, 0x8}], 0x800002, &(0x7f0000001bc0)=ANY=[@ANYBLOB="626172726965723c30783030303030303030726970653d307830303030203030303030308f6af85632abde8a7363617264b7363eda656c616c6c6f632c64656c616c6c6f632c696e69745f697461626c652c67fdc1edee50f2ac51646174615f6572723d61626f72742c666f776e65723d00"/124, @ANYRESDEC=0x0, @ANYBLOB=',defcontext=root,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',dont_measure,fowner<', @ANYRESDEC=0xee00, @ANYBLOB=',fowner<', @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x40, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8983, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:29 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x801c, 0x0, @thr={&(0x7f0000000900)="2876b855d1593a19884f537f5d42e7aaca0800ff9e860d38fd060c471af56e4f18df78209c3a4218d0bdb38c906996a4df0cf85c5891746c196c8e1f0f01f52d52f967f4c55f538cbe11fea9fa8afaeca3c4ce2db9db82c43c7aef04d51f3e732d933c0424d360cf112e986d68c3a9eebcb1e927c49d4f772b3cbaa056a9becd08dfd0d2c819e08ddbdcbd21346c9b9b7eded4958feda0482c5f1f4cfef14ac90f644c6aea390ead3d394c0ba89e48fa0350cd6f2519c7457b9b5404f04a49bfe5b2ca501535600ee46f485621028b13d85f5ba1ceb744821f4df0d71566f74a36a7eef5e8232bec746c9df7f143cf4754", &(0x7f0000000a00)="06710dac158615ae8e6050e37a8510908a6fc505892d842fede0b82187977ec86286cb5bea8410aeab1c7fefc1e2423ce18e80d987932d987a5985b66500fc62336d3e15f99570a3b6fb6b38c481ea162c0f15fc0063136719637c16c0e41216ee71778d3ffd60d319e5f0dc4b84a3f17e9b9c16f510f919ad7a0e3a5686702b7a7cddd70cf9de968d5731e65c5ce1d1b367e4073d"}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}, {0x77359400}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x440081, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2036200, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0xd}, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/215, &(0x7f0000000840)}, 0x58) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)=0x0) timer_gettime(r1, &(0x7f0000000280)) timer_gettime(r0, &(0x7f0000000100)) timer_settime(r0, 0x1, &(0x7f00000004c0)={{0x77359400}}, &(0x7f0000000500)) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:30:29 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:29 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8923, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 11) 22:30:29 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2108.973905] FAULT_INJECTION: forcing a failure. [ 2108.973905] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.975305] CPU: 1 PID: 11610 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2108.976100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2108.977068] Call Trace: [ 2108.977374] dump_stack+0x107/0x167 [ 2108.977799] should_fail.cold+0x5/0xa [ 2108.978239] ? create_object.isra.0+0x3a/0xa20 [ 2108.978772] should_failslab+0x5/0x20 [ 2108.979210] kmem_cache_alloc+0x5b/0x310 [ 2108.979680] create_object.isra.0+0x3a/0xa20 [ 2108.980190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2108.980791] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2108.981380] ? netlink_dump+0x729/0x1070 [ 2108.981853] __alloc_skb+0xb1/0x5b0 [ 2108.982281] netlink_dump+0x729/0x1070 [ 2108.982734] ? __netlink_kernel_create+0x860/0x860 [ 2108.983308] ? lock_downgrade+0x6d0/0x6d0 [ 2108.983795] __netlink_dump_start+0x62e/0x8e0 [ 2108.984317] rtnetlink_rcv_msg+0x74e/0xbb0 [ 2108.984817] ? do_set_master+0x230/0x230 [ 2108.985285] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.985751] ? do_set_master+0x230/0x230 [ 2108.986218] ? lock_acquire+0x197/0x470 [ 2108.986674] ? netlink_deliver_tap+0xf4/0xcc0 [ 2108.987191] netlink_rcv_skb+0x14b/0x430 [ 2108.987660] ? rtnl_fdb_dump+0xa30/0xa30 [ 2108.988129] ? netlink_ack+0xab0/0xab0 [ 2108.988573] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2108.989111] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2108.989638] ? is_vmalloc_addr+0x7b/0xb0 [ 2108.990110] netlink_unicast+0x54e/0x800 [ 2108.990581] ? netlink_attachskb+0x870/0x870 [ 2108.991100] netlink_sendmsg+0x90f/0xe00 [ 2108.991575] ? netlink_unicast+0x800/0x800 [ 2108.992071] ? netlink_unicast+0x800/0x800 [ 2108.992568] __sock_sendmsg+0x154/0x190 [ 2108.993043] ____sys_sendmsg+0x70d/0x870 [ 2108.993519] ? sock_write_iter+0x3d0/0x3d0 [ 2108.994001] ? do_recvmmsg+0x6d0/0x6d0 [ 2108.994452] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.994919] ? lock_downgrade+0x6d0/0x6d0 [ 2108.995405] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2108.996016] ? SOFTIRQ_verbose+0x10/0x10 [ 2108.996493] ___sys_sendmsg+0xf3/0x170 [ 2108.996952] ? sendmsg_copy_msghdr+0x160/0x160 [ 2108.997479] ? __fget_files+0x2cf/0x520 [ 2108.997937] ? lock_downgrade+0x6d0/0x6d0 [ 2108.998412] ? find_held_lock+0x2c/0x110 [ 2108.998891] ? __fget_files+0x2f8/0x520 [ 2108.999353] ? __fget_light+0xea/0x290 [ 2108.999813] __sys_sendmsg+0xe5/0x1b0 [ 2109.000253] ? __sys_sendmsg_sock+0x40/0x40 [ 2109.000764] ? rcu_read_lock_any_held+0x75/0xa0 [ 2109.001314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.001928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.002525] ? trace_hardirqs_on+0x5b/0x180 [ 2109.003028] do_syscall_64+0x33/0x40 [ 2109.003463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.004065] RIP: 0033:0x7f52f0b5bb19 [ 2109.004505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.006650] RSP: 002b:00007f52ee0d1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2109.007536] RAX: ffffffffffffffda RBX: 00007f52f0c6ef60 RCX: 00007f52f0b5bb19 [ 2109.008363] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2109.009196] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.010020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2109.010851] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:29 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='ntfs\x00', 0x420, &(0x7f0000000240)='lo\x00') setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 12) [ 2109.175362] FAULT_INJECTION: forcing a failure. [ 2109.175362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.177898] CPU: 0 PID: 11625 Comm: syz-executor.2 Not tainted 5.10.239 #1 [ 2109.179350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.181103] Call Trace: [ 2109.181662] dump_stack+0x107/0x167 [ 2109.182431] should_fail.cold+0x5/0xa [ 2109.183236] _copy_to_user+0x2e/0x180 [ 2109.184048] simple_read_from_buffer+0xcc/0x160 [ 2109.185037] proc_fail_nth_read+0x198/0x230 [ 2109.185959] ? proc_sessionid_read+0x230/0x230 [ 2109.186914] ? security_file_permission+0xb1/0xe0 [ 2109.187941] ? proc_sessionid_read+0x230/0x230 [ 2109.188913] vfs_read+0x228/0x620 [ 2109.189663] ksys_read+0x12d/0x260 [ 2109.190412] ? vfs_write+0xb10/0xb10 [ 2109.191204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.192303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.193403] do_syscall_64+0x33/0x40 [ 2109.194181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.195260] RIP: 0033:0x7f52f0b0e69c [ 2109.196037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2109.199914] RSP: 002b:00007f52ee0d1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2109.201522] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f52f0b0e69c [ 2109.203023] RDX: 000000000000000f RSI: 00007f52ee0d11e0 RDI: 0000000000000004 [ 2109.204507] RBP: 00007f52ee0d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.205996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2109.207484] R13: 00007ffeae885fbf R14: 00007f52ee0d1300 R15: 0000000000022000 22:30:46 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8924, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:46 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8990, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:30:46 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x321, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:30:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8f}, 0x1}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) syz_emit_ethernet(0x3b1, &(0x7f0000000240)={@link_local={0x11}, @broadcast, @void, {@mpls_mc={0x8848, {[{0x2}, {0x1000}, {0x2}, {0x5, 0x0, 0x1}, {0x1f, 0x0, 0x1}], @ipv6=@gre_packet={0xc, 0x6, "bf1f4e", 0x367, 0x2f, 0x8d0d380a3fd32843, @local, @mcast1, {[@hopopts={0x11, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x6, [0x7, 0x80000000, 0x547989b5, 0x9, 0x4]}}, @generic={0x6, 0xec, "151ca2b26c5a7c6bd725653e7c86159069548e2db8497c53b2f44003af6b01ed2e6845f3b8478a6595f108683030059d8b0f62c4a9c506739948f63b2d8ff37b28c6ad39df245764ff86ef366b9073ce03a2c37762e8fb4c15d9910ba1a020ab6a97b80f3fff4383d827faf6416bed5be743622836528cf13ab34c830aa59618d689fd1540cbfecd883c21697d2394b6ed1a283d78d0904f63f7cce4e589a05bf1be4c5a3bdf044ee3929971defafa6a111f03796776458a9b368d2308d4a19682d151b5931facc2ff67e0ae077bde36f7d5bdad37373c12c8c2d3916a7f2951438be044a872aa7d7f662fb4"}]}, @dstopts={0x3c, 0x18, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7a}, @generic={0x81, 0x89, "618025760a626be828c33b159549b3309b7b07c9defff5c7d8eee3ee01685eacd721e3493cf6d8db7a975549c23d3790ad5779446f6c4fd38c54fde18144af37c06930621d47d4fafcc67646821ee8a25f8906f3d80fcf1ef150d102ae9a75adf5ddaf2128f57363279c36883f11322070f1ad24d51a8474a037a346fde28dc4e985d51edbc2497a1c"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x80, 0x0, [0x100000001]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3c, 0x0, 0x1f, 0x0, 0x0, 0x1d, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x2c, 0x1, [0x1f, 0x4b0e], "80af32240603e1d8a2785ed0801877823ad1e6512f0130b982f38378f24a2a5e844044c5ba6ded1f5a5ef03d"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xfffc, 0x7ec], "bf01e1fe9036597cf467653fe5fde00020bebd8a751295420fb6d3e612e218f8ef79650d36af6c3154"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "5156047c7cf858bc8605e3b58c064b89122c47050aa6a8933783cdcc5909513df64440aa5ca6e501a0adff89378d746e241b2fafb372e3ad7bac1925e7b844005caa71ad32bbf40aff0affa8f19c4196116ea929338673f7057af6dcfb3277cc3ab66cb811a8d7d8d9987b1437fe57e841e09f76"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x3ff}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0x3f, 0x1, 0x0, 0x2, 0x6, 0x60}, 0x2, {0x1, 0x20, 0x1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "a6c88e13bb14e4f10fe6fcb3db0ca7a0c7b9b4880614004a5322dcdad8de100ec849badd68fd68e5eb132d034e036c8bc2c94548448aa7a1d89906ac66bff61ddd4a2820d88b2bcd421b"}}}}}}}}, 0x0) 22:30:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:30:46 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x0, 0x30, r7, 0x10000000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8927, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x21030000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:30:46 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) preadv2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, 0x2, 0x2, 0x1) fadvise64(r0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x979, &(0x7f0000000280)={0x0, 0xd5ce, 0x19, 0x3, 0x97, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x572d, &(0x7f0000000440)={0x0, 0x25a5, 0x4, 0x2, 0x2c0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r0, 0x7fffffff, 0x0, 0x8}, 0x9) creat(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) 22:30:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:30:46 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:30:46 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2103, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:04 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8992, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:31:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8936, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:04 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8929, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) preadv2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/81, 0x51}], 0x2, 0x2, 0x2, 0x1) fadvise64(r0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x979, &(0x7f0000000280)={0x0, 0xd5ce, 0x19, 0x3, 0x97, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x572d, &(0x7f0000000440)={0x0, 0x25a5, 0x4, 0x2, 0x2c0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r0, 0x7fffffff, 0x0, 0x8}, 0x9) creat(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) 22:31:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x9000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@mcast1}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000012002000e72866830000000000080000000000000000000000000000bd8373b71e900f2e6769652d73a92d5a020134bb504ef885b74248a04f697c8cbe22308cb87473fe8b40882c05e1c60fa1710a0800000000000000a0e3f6dba9"], 0x20}}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x20000011) 22:31:05 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f510100) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:18 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8993, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:31:18 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8930, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:18 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8e000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:18 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x108a}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12344}, 0x600000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:18 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:18 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xca902, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5652, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000340)}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000600)}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/83, 0x53}], 0x5) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x13, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRESDEC, @ANYRES16=r0, @ANYRES32=r6, @ANYRESHEX=r0, @ANYRESHEX=r6, @ANYRESDEC=r2], 0xfffffffffffffe8a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x13, 0x878c5bf8df414e27}, 0x14}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x5cb7c17, 0xffffffff}) fork() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00800000090000002e2f66696c6530005b144ec002a5c4472c33027188140241f9fa610360cc7ea71caaab025cbaf0f7f76d1df090a8a4d9e23e17531b236bed7ce6839270d0a30a1dbd719d897494cfbe9eb2bc7d8a9f488fc6f2ac180572d62e9662503c5a0afe3dfe1e9e3cdabca3355549e8ff884db190c5"]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 22:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:33 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8994, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:31:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:33 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:33 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:33 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0xfe, 0x0, 0x10, 0x0, 0x401, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x1300, 0x8004, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8, 0x2, &(0x7f0000000180)="57f035aa0a20223bbfa8823a276f62c00e771865d8fe381b7c8a8d43b39253de3c2176b6df946ad486", 0x2, 0x0, 0x1, {0x2}}, 0xffffff00) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:33 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_emit_ethernet(0x1022, &(0x7f00000017c0)=ANY=[], &(0x7f0000000000)={0x1, 0x4, [0x9ff, 0x810, 0xb05, 0xe73]}) sendfile(r0, r1, &(0x7f00000006c0)=0x7ff, 0xd) r2 = fork() r3 = fork() wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f00000001c0)) ptrace$setopts(0x4206, r3, 0x10001, 0x0) ptrace(0x10, r3) clone3(&(0x7f0000000300)={0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x13}, &(0x7f0000000140)=""/31, 0x1f, &(0x7f0000000280)=""/116, &(0x7f0000000180)=[r3, r3, r2], 0x3}, 0x58) syz_emit_ethernet(0x1e, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "04473d6fc4009578"}}}}, &(0x7f0000000700)={0x0, 0x3, [0xbe0, 0x2c4, 0xcfd, 0xf71]}) wait4(r4, &(0x7f0000000380), 0x20000000, &(0x7f00000003c0)) getpriority(0x0, r2) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) fork() 22:31:33 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:33 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8940, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:33 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x4010, r9, 0x8000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:33 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:34 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8941, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:34 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:34 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8995, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:31:34 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:34 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) recvmmsg(r2, &(0x7f0000001940)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/232, 0xe8}], 0x2, &(0x7f0000000380)=""/179, 0xb3}, 0xbe6}, {{&(0x7f00000004c0)=@ax25={{0x3, @netrom}, [@remote, @null, @bcast, @default, @bcast, @null, @remote, @bcast]}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f00000007c0)=""/177, 0xb1}, {&(0x7f0000000880)=""/163, 0xa3}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000940)=""/139, 0x8b}, {&(0x7f0000000a00)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/138, 0x8a}], 0xa, &(0x7f0000001e00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000d40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000dc0)=""/138, 0x8a}], 0x4, &(0x7f0000000ec0)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/128, 0x80}], 0x2, &(0x7f0000001080)=""/235, 0xeb}, 0xfffffeff}, {{&(0x7f0000001180)=@x25, 0x80, &(0x7f0000001500)=[{&(0x7f0000001200)=""/236, 0xec}, {&(0x7f0000001300)=""/44, 0x2c}, {&(0x7f0000001340)=""/71, 0x47}, {&(0x7f00000013c0)=""/91, 0x5b}, {&(0x7f0000001440)=""/92, 0x5c}, {&(0x7f00000014c0)=""/30, 0x1e}], 0x6, &(0x7f0000005e00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001580)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001600)=""/154, 0x9a}, {&(0x7f00000016c0)=""/112, 0x70}, {&(0x7f0000006e00)=""/4096, 0x1000}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/207, 0xcf}], 0x2}, 0x3}], 0x7, 0x40000120, &(0x7f0000001b00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:34 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfbffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000180)=""/226, &(0x7f0000000280)=0xe2) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_emit_ethernet(0x1022, &(0x7f00000017c0)=ANY=[], &(0x7f0000000000)={0x1, 0x4, [0x9ff, 0x810, 0xb05, 0xe73]}) sendfile(r0, r1, &(0x7f00000006c0)=0x7ff, 0xd) r2 = fork() r3 = fork() wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f00000001c0)) ptrace$setopts(0x4206, r3, 0x10001, 0x0) ptrace(0x10, r3) clone3(&(0x7f0000000300)={0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x13}, &(0x7f0000000140)=""/31, 0x1f, &(0x7f0000000280)=""/116, &(0x7f0000000180)=[r3, r3, r2], 0x3}, 0x58) syz_emit_ethernet(0x1e, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "04473d6fc4009578"}}}}, &(0x7f0000000700)={0x0, 0x3, [0xbe0, 0x2c4, 0xcfd, 0xf71]}) wait4(r4, &(0x7f0000000380), 0x20000000, &(0x7f00000003c0)) getpriority(0x0, r2) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) fork() 22:31:51 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:51 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8936, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:31:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x434, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x6}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8943, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:51 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfeffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:31:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:51 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:52 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) accept4(r1, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000200)=0x80, 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:31:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:31:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x1000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105142, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r5 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x2b8, 0x10, 0xe, 0x101, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x7}, [@typed={0x8, 0x8b, 0x0, 0x0, @pid=r6}, @nested={0x1c1, 0x3c, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64}, @generic="9fc3e58401b7490b1f538e4a21cc94b4d2bedc8454a382f31509417cfb59e13d479b05943a065af5186e3ada73aa10342d997b14c9a28190c5c7226c7b7322aa3f9c93f136746dda034aa9bca6d6b3312e1a325fc0aaa96ce5f11f2f05dec27fdc5c8d9b08de9ea53913058dd67af6f1048688abe9e6a1355797aabc333265cf8a1c7b30cb642c234e5f81854ee78af33dcdaa8f2eba6b739ee977654f67c7fcdef0", @typed={0x4, 0x15}, @generic="c9f54a318765e303ced0d60723260b1342839d9ff5ceebdb9b8d8a324bec111b22f5cc34a179babe896060bdb1cbaff3e7f160d7ce34181352", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="8cf3d2b4cc400e7bb2a7186f80fc352d8214df6ecb7e9d9f546e4a3798827f6b6bac3734cdcdd34c88bef76b15e2c69cf0f6182af404c2e29127aa22e26c5c03786a37a40047f2f0bfaf61e5ab4bf475dc3d475d78bdc1858e0607c4e5d4e13be4cfaaf8e60efad93d569bab526c7a9bd4f726078be3940f6f3c5baa19f2c549211717087cca3a8a1be6a4f8920229e74c76365f5ef50f910c42266537856029d254d3211f30aea94811811f78972e5c730cddec0abd7a0e13b0b0d629a0"]}, @generic="6a147767eee8f480e53f883f1f2b2363a922058c596352709a04d9b0527340337edc5a0ef2eeb2c4abe9a1401a3c12cade65998e4bbf7b1b3ce8b1fcd55efa916cfcd779e4140da0378efbc75fb4b78968a85044a928e85150e42a03704bb04898fe81dff3da0f5154550f7a6a95e6268128b1a7dad5ff48bbb90014a7de2e6fa47afe603edec28724608fc6f7160cd768e5ccf4a809ba81393995164271f1191b5441162911fa1ccd2651dc95c60df294eba235e0984cb3198c47ed45e42b54a107f85db2f0cc21713c5f41bd43c157a40fbb71ff88c0a8"]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r4, 0x0, 0x10001, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x186, 0x1c5802) sendfile(r4, r8, 0x0, 0x2000000004) 22:32:08 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:08 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8940, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:08 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:08 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xdd00000000000000, 0x0, 0x0, 0x50804, &(0x7f0000000180)=ANY=[@ANYBLOB="7a049b04a0f02992e984ce7b725132745da45fa3392fbd09b1034152ff3cd6557c2329b883fc9ff36998bbfa883b3761d5dcd0176d34c5e5ee96be32656d1a872b", @ANYRES32=r0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:08 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8946, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:08 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff0f0000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:08 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) r8 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 2208.106134] cgroup: fork rejected by pids controller in /syz1 22:32:08 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:08 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:08 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8941, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:08 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1517f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x3404, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:08 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a2, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:25 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a3, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:25 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x201, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x50000, 0x100) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x18c, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:25 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8948, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:25 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:25 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:25 executing program 1: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x5, 0x80, 0x7, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="015da991083fe0858971666e7017dfd92ccb67741ffe84f757903dd784c9b33b4f45149af33d55c54add1e8586a3be2fd4c101b12c2443937ee72c296cf8cc5819fdd31c9d9a3c7ea30f1ba8a3a5a65a22b0140bc81f1bbac9cad81877607e9cc0793b7d6f67182a22dfbd98b9f395847448939f4d91bd89ccfadac067382af3d700"/151, @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x324, 0x16, 0xe38, 0x70bd29, 0x25dfdbfd, {0x1b}, [@nested={0x58, 0x25, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r4}, @generic="4a139857772034d2bad6d40b6497b1877a351fb4e7f38ac1b432df6e377f5400d8c6de64de88b565d29966c928c59b3fd2f4c2afec572a2fce10e91aa19e289ff44a1435", @typed={0x8, 0x6f, 0x0, 0x0, @fd=r5}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1231}, @nested={0xea, 0x8b, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r8}, @typed={0x4, 0x18}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x3}, @generic="0f5471b6210843d1d388551c5bcaf7a163a648ad006e22fad6a178848d4efda54ed78602ed0fcfecf6bcfc60c3ccd0d8ca99b664ecdedc6e5558e2438a12e789b688402c0396e3654771aef00367bdbefffbb38ef3166825a954c85f2cd86f45014dfedef4f14f9b4290ac29f96daa49c135625bf6f51be5568f26615e6fe412f7534181e0dcb0437fdb2353c15e6c60", @generic="eb1e66ce5e02ec416d60cc2fc1c5af5ccc02cdf0ccfdaa58434db986fb9fba43ff21d5f45927de097fa429d200cd", @typed={0x8, 0x73, 0x0, 0x0, @pid}]}, @generic="c64e04d552cd91032c8c49aa4a8fe7ac8a33f4d6de945709b15c443d9f8afe1b8d0c2abbf5be4215e4d6a1b79706b2453432a1", @typed={0xd7, 0x9, 0x0, 0x0, @binary="5e05b638f08592b90a32212e97424328c7ae1b6541586dd8238e711ba54f9fd5a644fee538fafc4a22a1c8bdd5644a4ae71ac7f092b1a6d88de26464ca96bb615c1f4415f1eacb0e52adff1bb932dbcf754becc812c4d7cec08a20272f2d67d038a64e6033dc7505656e426b4727de1c1fccb31fdd43bf80787faf67efe4e28ac96dcc529956d93ab487f7b9b96553a364aec23bdbbb4f22999645ff95743af066c151862ddc20b7e4746578a35034bff5a4ecca58df69af676927948dd32a61dfbaa1af7f4e1bb8742e1667740fae648ab398"}, @nested={0x24, 0x7e, 0x0, 0x1, [@typed={0xc, 0x30, 0x0, 0x0, @u64=0x200}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="2ac6cd7309b26a93de49c5c8d31e582588060ea7a0c529475c14d2dc2717db09c2ddef42896b5642dd307b585edaca80e5f783cda10c7c0c6333c8db5b1eca45689c36d61aeb9eff332fa79a324db4c2afb65447c9baa0fdca4bec654d9f13d5730e61a72a1d3c36bc2f634ac0f6a945dd2f07f8d03405bb8a742596636856a70a2e08ef94f27bc5f010de7b439cbe96f9b482ab47"]}, 0x324}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) 22:32:25 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2225.252681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12063 comm=syz-executor.1 22:32:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:25 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8943, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2225.445453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12072 comm=syz-executor.1 22:32:26 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:38 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffb) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:38 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:38 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0xfffffffc}, 0x0, 0x100000001, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/bnep\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r1, &(0x7f0000001400)=[{{&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x4, 0x3, 0x2}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="a10562cd7820f0aa839109d407dfe7eebe64e39496fda3c064d4da", 0x1b}, {&(0x7f0000000240)="aa62aede1b213fa03b936d2ebe0bd0642596eb95c682f2afaadd5c2eae12e2e0960a9a6c5564075264c4b37639275450f7928443f2f5e37db3894928b303cc5f3e51da9925416fa26a25efd3a700119e1108c8e7e6b56ec5e6b5f0ca05a7426a84d12da8c0a704e4840113d1bf4f3a9a73044877b20b574e642c3e3c", 0x7c}], 0x2, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x80005}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="d1f2aad23e9cad5dc8d8d8f1ac253b63983af5a88a042a2534a80b1918adc73589579d6e1d4d5ce7438cb5a79a3a62af0523e8623d57929a50869c65fa008d7d730624dbcb811e2121ee8991fb6c4e6b2ce84bca7901b42ce7ce2057c76eeefa98936080b487038b34d497ad3a45989750136c9b39a476f57436cfaeca0b5407b2cd969e9e7ea555b4be8db5ebc412550884ac0d66a31872b6a270280f35fa53619c16cb0128e6ab052db2f6ba95ad43f9a7ae09b42ad6cdc32fc5751474b7049729b7506b3cd7cf9f80b2faaf2a69cdcabf24e5a0285bf76e294e23a28d4e95e8b132fa7a6f06", 0xe7}, {&(0x7f00000003c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)="b894b27f9fa7ee94cb264e2eec061a1edf8be1ac81f480031331bde5292bfff5d87a8f26d17fdfda3206e78d419729d842e9ea17ebd0b1b03638f3b2c0937ac8fdc79b0bec5de99165df17294209fa97597be97e4ef41d963e262fd4fe05fa92a277f92bd337b8da2eff60b607346263a3851becd1d94891f1252d85c83b61519ca5b6308534e22d5b6353135c8e4047ea6ba0a2bea1092088f1498f91cf86ad6ed5dbba3f8408222d", 0xa9}], 0x1, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @timestamping={{0x14, 0x1, 0x25, 0x3c9}}, @timestamping={{0x14, 0x1, 0x25, 0xb70c}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff00000001}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0xc0}}, {{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000019c0)="78256c4eec51a611acebb50198b410704b55092c97f5b42a2532de9d3af906accdbacedd746eff67f6afc9d4b0365a73b4209be7d631a503b5cf69324e6d6cfcb661801b8f9da35cf93602c654b59e0434ca791afe62b2aa443ec29c3fa44ffc55d7a20a2258c8caec1653c14f299d200a1f400eafb6c15edfb1a1a6385b254c68c933544632bc254c1de141321fba548412e8c0284ef42e57d6dd35645a47b4793635a0681858de6d2a7234703413eb3b583c9a2d67b04917bd88043bda6fe797a924f9ac819931c3d8e00ca5cd50f7374c2b7957b91304d4c83ab6caa801dbfaabb7f0c5", 0xe5}, {&(0x7f00000008c0)="a5ba47868ea403900d041eb70bc160490fb3d92ab52707f8b5bef8fbeb4e3073ee936f4831ea31806a13cc7e5c45db6b1afe13c6ad04509baa913eb4416fea9c61507450025a09aaff823f5edb4276753254bd7bacdd70", 0x57}, {&(0x7f0000000940)="d4e6d6ec3c74b696d930ff91b320ac86f16acc9c584c0f2016f7", 0x1a}, {&(0x7f0000000980)="0b3edb4cfec4b8ee0bc3048d6d786ee303fe8e750b9464304ca8f73559f290bcedec491c0f438cd149a05dd860a5f6acbedaeaafdb820474dadd95af51eeca27a46782d76ea367f1a4cd48313c3bd664f2083322c0147fbb654578169534d31f64a97ba7785534ad18a7cd005b5debc15cbedbd1b8a927a02b76bf909723f05c79b536a63f179eae80119931000e5a4aeb6ec0d376d7452ec40bd091", 0x9c}, {&(0x7f0000001ac0)="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", 0x122}, {&(0x7f0000000b00)="39b70564c26307feea5c08041a1fb6bdc569f33b4a2d26c30989d2e652087e8aca3ebd2e31ede2ba8a34279bc78c9f709070632a417bd03bb76faec1a033cd5327387696843fc6a0510263ab912e65ff9cd9cb1625223ac83ec80bbaf4b7dd7008f1c00b81cbbae4ba908e39833e52080139020fad63fa1a1ee8213b9332014173ef761192253d1a51aa5763878606e85e8e5cf8a2941c", 0x97}], 0x6, &(0x7f0000000c40)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf54}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)="c29eccf7dfd422fcb3b036b25fe1da8b0064d008884d7c6c9e73b21a62136e8872992f60ec390696d12603de5aba604ea39422eef5a292674cebae967299b0dda57bea80eb2d30762e82f0ae4bd1ac62c0f5824c9b37457b7056c7384a92543d5d0cb072aab2b3104a8ebaf70da9e6ab47f8ff2a49a4286c", 0x78}], 0x1, &(0x7f0000000d80)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3ef8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0xc0}}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000ec0)="c6cc91c42bf25a0f30501ed1a62eaf81b770a94ec502a99b2f81533ba18c4b2de1b04988696a6bde5c7ae979d04370610310181bf1c9958eb92996a3a83340875fa4145d6ddb9622366c4f7086a1dc91d6f910dcd288d7f5612a47e10e5d9248bd88aabb12aa3b4f7be1d2ede5315261623905c61b2e807283c7b8c6f0583e8d8de54c6aaed56aa9f6417607aec6b989a390b0828ffa34d9d695a2a64dbf1410a92b9f3df545703962810ed8bfd3d047c778ddeb1343a8521589418f4d3e675e6c9d0227ec74bec2821d7b3c83", 0xcd}, {&(0x7f0000000fc0)="bf85467d47d97be75c1737cfd196461b3d28b0725824f069b5d734f4677442e84b942efc5e97a8de0e9b959af783c8ee5781a0a0b53e5f", 0x37}, {&(0x7f0000001000)="e71494dd6cdc8af4fe7ea6e57d8f37cc17ab7016be1fe4e1b2241e00b91949f1218608f5b384a37835884e0abc6e42080b17dfd0e04a2d19353a56b9075d9a741e4d80193c31486b26df17519526b06fef8dc38ea21693e5a774d7eda7c0169cbd79e24fd082becf1bcff92cfce5a7df6959f4cd8fe0be5adc99e2f9335e7e7ea6b62c7710037a258d7d8dbbf8bf090011bdabea79bb381efd2be2af76d51b4e574073459ee933a6df4f73a7a45114ed8172a9c85c1ec33316509e2da5bbc19dfbdabfae2aa065036f292bca", 0xcc}, {&(0x7f0000001100)="d1c1105e71c197c926d1312cde4c15983abdb3b95182744cb4563263066fc2161797", 0x22}, {&(0x7f0000001140)="0f7a2ec60484c396e23b324bf9a24a6a2d7aa167cc2e5aac4c09575e14df13be261104f6feb270fd7ae6580ebacd02362ab6121f7a9608e0e03ed12aeefd8f3a3ae3f03ccfce46d01053e9bc4ad11a6434269fa0a9b0913d9aedf3a68a70f01ee602fed92f51d27261c676cf4095bb721059873c336c768188d6416ad85f052e7cb2320858843a650a58609058399d652e92f1d676cd637788ec8715214fea6dfe6fa88e83fb5924de2e2c5870985e877c4fb5", 0xb3}, {&(0x7f0000001200)="b4baa4d7006230659d058d5c72dd61f1f9aef71f33e7db67a4fb29be58c9fa327e1ea029827963ec33fe3bb786b16e1dff9574c5ba99d86fd618fb65287aa9612c61b722aa3ae00a72ce622ca0ebf14c77d340d14324f057fd47fad6f20bb218c86be9f7c474db47e0b1c99a18a48fb8a3196ece26d29b97ac08f5e6974a74458cebe4d6fd90dd8b64495268dec292d2baf8499615061e5571d22386781f382d66efae1fef7f574154e3538ba73f415eeef0ae4eb9dabb1e4d5cfa70f7fc58d636500198938e7ab0ac7a92f53b396152", 0xd0}], 0x6, &(0x7f0000001380)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @mark={{0x14, 0x1, 0x24, 0xb0cf}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x78}}], 0x6, 0x4008080) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) execve(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001640)=[&(0x7f00000003c0)='ip6gre0\x00', &(0x7f0000001600)='#,:\x00'], &(0x7f0000001800)=[&(0x7f0000001680)='/$){!,\'*\',\x00', &(0x7f00000016c0)='net/bnep\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='syztnl1\x00', &(0x7f0000001780)=')\x00', &(0x7f00000017c0)='\x00']) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:38 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8946, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xff00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:38 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'veth1_to_bond\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="018100000001010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffe) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:38 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x894c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:38 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:38 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:38 executing program 1: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:39 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:39 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x80000, 0x102) syz_io_uring_setup(0x5403, &(0x7f00000001c0)={0x0, 0xeb39, 0x2, 0x3, 0x37d}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x350, 0x6}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:39 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:39 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8970, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:39 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8948, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:39 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0xa00802, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d492dfcc6c1624119caadc4ac25abf72690c8935062e08b4b626e82709481813c962e6a6802863aff75d7807a0efd7b0bffa2bcb125e0f3fe7bef27a1cb674d63f09622fa5acec0677eefb179b81e75a62b80bec0768d0ef89d3c6a2b048c9a02a3", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f73652c616e616d653d73797a746e6c31002c686173682c6f626a5f757365723d5bde2c666f776e65723c", @ANYRESDEC, @ANYBLOB="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"]) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200)={r8, r9+10000000}, 0x1, 0x1}, 0x40b0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:39 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:39 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) [ 2238.956278] 9pnet: Insufficient options for proto=fd [ 2239.031733] 9pnet: Insufficient options for proto=fd 22:32:52 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:32:52 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:32:52 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:52 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:52 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:32:52 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:32:52 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x20, 0x0, 0x8, 0xbaf, 0x0, 0x68e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) io_uring_enter(r9, 0x66ed, 0x54c8, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) 22:33:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:06 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:06 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000180)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x74}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00'}) 22:33:06 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:06 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x894c, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:06 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8980, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:06 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40087602, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:06 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:06 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8970, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:06 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff0f0000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:06 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:06 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d48, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:20 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:20 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:20 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8981, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:20 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4020940d, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @random="316df7d25972"}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8971, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x4, 0x3, 0xdf, 0x0, 0x381, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x81, 0x6fb5314e}, 0x142, 0x4, 0x8001, 0x2, 0x2, 0xffffffff, 0x15d, 0x0, 0xb3e, 0x0, 0x824}, r3, 0xb, r1, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:20 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:20 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:20 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x21030000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:20 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) 22:33:20 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8980, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3f}, 0x201, 0x8000, 0x0, 0x9, 0x8406cb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x102, 0x85, 0x8}, 0x18) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps_rollup\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000018}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "e778bee5fe15e412eae2b6a3b97f2de02e2715c711d0c8c6700236450aaba98eb94476f10c33424257941c81afeed62bfabeba258af41617eba69d3bee96ac511d236484880afd330271887c90d2f6936ecfaabd5ac95d5814ffd51f4e46e5d9c7eeb5d883a97e28778bc7e2b87b43ada45f64a5eea1ca0552a8433a7638f16567e00c8b56"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "53ac1bfbfaf7e800600ffbd2fa35ba5808fde109725c2962003c8eb644cbe8f594f89a58355cfbeaa33b9f8f96e8cb115106aa1b22f28f46f6085a9a15ee3279911678fd3400b0454c031fdfbaf4ae0bf1e44de6d69951c909441130633535d594494bdaac725580ac751a8a3eb050d56a44c70a3124a1d4151b0ba729c953e75ba73bc9f96f1ab7afce84a50a5563c0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x34e}]}]}, 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) 22:33:20 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8982, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80086601, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:36 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:36 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80087601, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:36 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7f510100, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:36 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) 22:33:36 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x19800, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = fsmount(r5, 0x0, 0xf1) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:36 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8983, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:36 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8981, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x34040000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:49 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x26, 0x200, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x20, 0x15, 0x0, 0x1, [@typed={0x7, 0x1e, 0x0, 0x0, @str='lo\x00'}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @random="7d1ba50cb75c"}, 0x10) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) creat(&(0x7f0000000000)='./file1\x00', 0x0) 22:33:49 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8982, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:49 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:49 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8990, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108906, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:49 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:49 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108907, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:33:49 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:33:49 executing program 4: write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x25, 0x1, @tick=0x4, {0x2, 0x20}, {0x8, 0x3f}, @queue={0xff, {0xff, 0x8}}}, {0x40, 0x3, 0x0, 0x40, @tick=0x2, {0x0, 0x2}, {0x3, 0x5}, @result={0x20, 0x8}}, {0xb7, 0x7, 0x59, 0x80, @time={0xffffffe0, 0xe3b}, {0x4e}, {0x9, 0x7}, @note={0x0, 0x9, 0x3f, 0x4, 0x5}}], 0x54) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) statx(0xffffffffffffffff, &(0x7f0000000400)='./file2\x00', 0x6000, 0x10, &(0x7f0000000240)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x16128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000002, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x100010, r5, 0x8000000) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9b) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:33:49 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') 22:33:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:33:49 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8992, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2103000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8993, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:04 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:04 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:34:04 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8983, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0x7, @hdata="33f479281b7d878e6041ca6aeb09b1a35756360903f7994f927594a4d6a3c200b8653c23123e84c16fcb1b9ede6d7afa6bef21e013831ac0e7999ae3d16991a1d565c0361898d5c4", @esp_ip4_spec={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}, 0x7ff, 0x81}, 0x1, 0x1000, 0x6, 0x3ff, 0xffffffffffffffff}}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:05 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) 22:34:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:05 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:05 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:34:05 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8990, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:05 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:05 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfbffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:21 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfeffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:21 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0189436, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:21 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8994, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) mknod(&(0x7f00000001c0)='./file1\x00', 0x40, 0xfffffffc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x31, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x3ff}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:21 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f51010000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:21 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8992, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:21 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x4, 0xfffffffffffffeda, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, 0x2, &(0x7f0000000400)=[{&(0x7f0000000240)="0026364918b04660f2f4feca282fdd34c438fa4c02d6d613331d48017facba2db52c63efa444e9d9b18e1370e0965bdd1df52182b3ac303cc4b60af00dc541899107635b5edd209934d2572a1edd2488678017d14b6d27947c65ff4e510c531b649f0ed59a", 0x65, 0x7}, {&(0x7f00000003c0)="9f99b759b97880a7f218a549ee82b811c2dbb703b12ce4604a80a0b304272285d64ccb0bb032f9b3a13455d0a9eb7d0485b3449d", 0x34, 0xacb0}], 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="687567653d616c776179732c687567653d616c776179732c687567653d6e657665722c6e725f626c6f636b733d1525342d5c74322c687567653d6e657665722c6d6561737572652c736d61636b66736861743d6c6f002c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c00c52b7dada446e81ccda83c37123fd22589cd46687a0431913207c1784dce91ef267214517c37e49a675508937dc49eeb2242e400669705cef8cf3405899de7b61f8688b0f6abacf46350cf4110b0d34a9bdf3374d7d59acd2e63218af22b1b32138f09ca00994d3e9002ecc09ec794f74059320f6522d8d996823b04b55df530142ae05fbfe56f3a1a8fb866c530b497ef765d73fee54e3f60078aec2c364419"]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(0xffffffffffffffff, 0x54a3, 0xd888, 0x2, &(0x7f0000000180)={[0x8001]}, 0x8) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000380)={@mcast2, 0x53, r2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:21 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8e00000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:21 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc020660b, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:21 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xac) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x0, 0x0, {0x4}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0x64, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000226bd7000fef3f82358f3dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40084) 22:34:21 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f0000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:35 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8993, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xf, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:35 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004ac0)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/81, 0x51}], 0x2, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000540)=""/148, 0x94}, {&(0x7f00000006c0)=""/185, 0xb9}], 0x2}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001900)=""/143, 0x8f}, {&(0x7f0000000600)=""/32, 0x20}, {&(0x7f00000019c0)=""/238, 0xee}, {&(0x7f0000001ac0)=""/152, 0x98}, {&(0x7f0000001b80)=""/220, 0xdc}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001e00)=""/47, 0x2f}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/235, 0xeb}, {&(0x7f0000001fc0)=""/136, 0x88}, {&(0x7f0000002080)=""/108, 0x6c}, {&(0x7f0000002100)=""/153, 0x99}], 0x7, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002300)=""/148, 0x94}, {&(0x7f00000023c0)=""/196, 0xc4}, {&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/156, 0x9c}, {&(0x7f0000002640)=""/208, 0xd0}, {&(0x7f0000002740)=""/150, 0x96}, {&(0x7f0000002800)=""/4, 0x4}, {&(0x7f0000002840)=""/223, 0xdf}], 0x8, &(0x7f00000029c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002ac0)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/1, 0x1}, {&(0x7f0000002b80)=""/217, 0xd9}, {&(0x7f0000002c80)=""/131, 0x83}, {&(0x7f0000002d40)=""/156, 0x9c}], 0x4, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002f40), 0x6e, &(0x7f0000004300)=[{&(0x7f0000002fc0)=""/187, 0xbb}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/205, 0xcd}, {&(0x7f0000004180)=""/111, 0x6f}, {&(0x7f0000004200)=""/242, 0xf2}], 0x5, &(0x7f0000004380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000044c0), 0x6e, &(0x7f0000004880)=[{&(0x7f0000004540)=""/8, 0x8}, {&(0x7f0000004580)=""/255, 0xff}, {&(0x7f0000004680)=""/227, 0xe3}, {&(0x7f0000004780)=""/149, 0x95}, {&(0x7f0000004840)=""/18, 0x12}], 0x5, &(0x7f0000004900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000004980), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004a00)=""/114, 0x72}], 0x1}}], 0x9, 0x0, &(0x7f0000004d40)) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000004d80)="e8a604512bbafbb4414befa8e0706e810d9a2f348691358fb91ebaa642291ecbad95ae") r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8995, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:35 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:35 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001880)={'ip6tnl0\x00', &(0x7f0000001a00)={'syztnl0\x00', r2, 0x2f, 0x7f, 0x0, 0x8, 0x4, @private1, @local, 0x8000, 0x8, 0x2, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="d1025912ddfb64df2a10f171166c4cc9f2f2cd1cbf9ce50b2e670a6129e4a852344d41a7f9fbfec5686799d601d7dcc53a657a33d522b277602987dd039908d77e750e4c223ea17f959c9ba06199a3ef0cd81b344e5d0a73f99d8c2ea1026f", 0x5f}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000200)="6d52a418c9114053533b07bbca9c603c643884a7e7aa6285c321ca3be365ca1614efbd2dd447b7478f8324092dd651708aeafa18f2e2877c9a1d788155bf55c57c1102f476d6bb870fe5f0e3dc0156697f2ea995752d2274058a899e50b20343db742f7e521bd055e3628727d918f3d58b4e", 0x72}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000280)="707c5962f495ac23d60f70b35f4a906817cfcadf143af7d5021f10ac47be2720a7bc0626806c4dca5853c9a1d1bee91a27b8d77de4586e43c5c07e50f812efaca9ec01eeaafd8a43f9dc27a97680b7ef6ebb2f6be1af5515ffb01bd97e43480666e66c26bca0924f4c1c3a864a08aade071f5c8eb095e7cba530ac53091bd8a9108a00d4e13226103ede2037c31195252f3d99c8dd904039f2ac138a203e8e2ac6472916263f1635e2d3923741fe652b8de35cace4df432c3c49557daa0792b392b74880af931a952b53", 0xca}, {&(0x7f0000000380)="85fdc6873a02ad2bee284341242627f79bce30ff324ee3c58d0e5ed2bbc10334c55bbf14dea6ca176e02cebc5385571b15917de6ea6e5fccccb5dafe475d985e9c799081d14b6fd0085cfb2050d6cf53317f4e3aef751ace0fbbd28cc11c176ab91280da4b9c78ba93a51bf8b129c2aa368c", 0x72}, {&(0x7f0000000400)="78cec0b4249163864755a97f47c7bf4103d8cf170eb9828662951e03eba7e92fe32eca80bd1446f8edfa2322c166af6b142caca68bea84", 0x37}], 0x7, &(0x7f0000000540)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x1a, [@private=0xa010102, @multicast1, @multicast2, @local, @loopback]}, @timestamp={0x44, 0x10, 0x71, 0x0, 0x5, [0x1, 0xa1c8, 0x9]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xb0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f00000016c0)="f5b07bbcf3b42f5d6274939ecb7e391ee8c869cfc2ae32bdf0e88dada1596ac918b77c56ce5fe97b8acb15983b44eed2903c57c222cd34a05d52a2d48bd75af222817745b4f9370e4c892743b5ff1862c41ccd10387e30f098a98a765ebe010b087727042f657d99bd0fdd44c1949de0bdc5268a241e5d3637d3f0c315feee0defa10f8c470c49b74319a3f86e7c3be4c8f23ac2e0af6b0376b40ef768c255c03357a434b84b426822b5929499f971e43d4e1d012ae0f3bc3b308eacdf70c4", 0xbf}, {&(0x7f0000001780)="5ced9a5532836ce3c14519b7df6794475a465435f7e970daf15cddbf682832b8fb9ede58cb84778f7a37ad48103e655aea3599baa4ca3c989848bfece368de5f4c07cc5fe855ac24c660b848bcd69e16e83fcd89da5e9bfc3c712e0cb82bcafc52890e", 0x63}, {&(0x7f0000001900)="051afeb3ecb78e4d9caaefbe54338a765ee677fa777e712b1ce5b902cab480c658a6d35167a56d86459368eacbb2bfbf484e375331dd425987eb43c5ac07af2f23e68d4f036c1dd3c7ca7a5cca8a24917864daf5b3c4635a34421c419fb69b4421a532bd8fcad8ec554c396d28c19dca898f897400ca785b359ec28df35ffda6f2eccedd062394e282506e0feecbcb1cb4bf2e4d283e1569956710c838b7f446f4b4ff4f61040127b0bbb8066ce11cf2c46fbc915d277061edf7dd784940dce0185308bcdc9bd3ae211fb31ec09fbf7af08cbc27dd393395b995c6e10f2e3dfddc04209ac9239fc874d3e7b28ca6e0ca294840f3fc2601dc", 0xf8}], 0x3}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="85e5152aa6c3578e554deb96634d2ce1fc4d8026b574dd00aeb0883bff841850c680f6117d123b2c24241a9640410fd7a4b9d72cf5fdff656236c14f5c", 0x3d}], 0x1, &(0x7f0000002e00)=ANY=[@ANYBLOB="1400000000000000000000000200000000080000000000001100000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="e00000c6048de2e35439c13e66aca5010a5f284dbc560a69f108"], 0x1f0}}], 0x3, 0x20004000) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:35 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8994, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x73, 0x1, 0x80000000, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x3, 0x2}}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:35 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:35 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x16, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:36 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xc0, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:36 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:34:36 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfbffffff00000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:36 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:36 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1, &(0x7f0000000240)=""/177, 0xb1}, 0x2}], 0x1, 0x0, &(0x7f0000000340)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000003c0)={0x77359400}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_NOP={0x0, 0x5}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe2c, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:50 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:50 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r5 = epoll_create(0x10000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000200)={0x2, 'syzkaller0\x00', {0xd73}}) fallocate(r5, 0x4, 0xffffffff, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x4, 0x0, 0xbb, 0x4}, 0x861a) 22:34:50 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfeffffff00000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:50 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8995, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe84, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:50 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8949, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xec0, 0x16, 0xd01}, 0x14}}, 0x0) 22:34:50 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc22, 0x3f}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001d0002002800000000000003ff000000"], 0x14}}, 0x11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, 0x0) 22:34:50 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:34:50 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff0f000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:34:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x33fe0, 0x16, 0xd01}, 0x14}}, 0x0) 22:35:06 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:06 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:35:06 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f00000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:06 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:06 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffb, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20000054, 0x16, 0xd01}, 0x14}}, 0x0) 22:35:06 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x152800, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000003, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x80, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, 0x0) 22:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7ffff000, 0x16, 0xd01}, 0x14}}, 0x0) 22:35:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8949, 0x0) 22:35:07 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x8000a, 0x42f2547b) accept(r1, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:07 executing program 1: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff0f000000000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:07 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xfffffdef, 0x16, 0xd01}, 0x14}}, 0x0) 22:35:20 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a2, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:20 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) statx(r1, &(0x7f0000000180)='./file1\x00', 0x800, 0x540fb1e61cf4ba42, &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:35:20 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0xf, 0xd01}, 0x14}}, 0x0) 22:35:20 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffe, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:20 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a3, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:20 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffdef) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe}, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2400.277698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=12876 comm=syz-executor.2 22:35:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0xd01}, 0x14}}, 0x0) 22:35:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r2, 0xa505, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0xfe, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x61dfe000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:20 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:21 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffff5) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:21 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x12b0}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000001c0)={0x9f8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x11, 0xd01}, 0x14}}, 0x0) 22:35:21 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89a3, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:21 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x12, 0xd01}, 0x14}}, 0x0) 22:35:36 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:36 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, r1, &(0x7f00000004c0), 0x6d) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xfa6e, 0x6, &(0x7f0000000540)=[{&(0x7f0000000200)="ee994cdc9eb7b4e7639e56767c10059fd7f3dd3d2790441bfb8eef9197cac8639e57996c9c2b9b68cf20caeb61fe4d5347bf96677c40c070bdb01db8ddeed5120532c1efdc55aebbcadb4fb17c0f304714c7dc2db2b263261786db688afb230c3110298902e85bc96a573eb338deef6f41a7a51098452b2fdb4854688eb7f1ea91b2ad85bf64bb889d6a5fa1906c786938c128897a247be79a5801db4850a45e6cad0917bf67b919dffb3d7ccdc0", 0xae}, {&(0x7f00000002c0)="837352bdd37bf2c3006c4104584778a0e7239406f0e2209ee098d1d6ef", 0x1d, 0x5}, {&(0x7f0000000300)="030623f9b3f8214b5a66b58e83c859cfb9c8a0c4643d29490bcec826b4b2723361b9fbc65fc4253e30152d04c9656da5fb14d616430d6f311d4e553514ed463b0bff4dbb47ac230c413c3c606445be3e0d603b41d8d47c88f2b2ec3e9a518703c39411aa48c6592121e875fcac4a9bddc4b86fdd9fe8c35429611152036a6f57c1d94ede3113bfd228ed0000c3ca8b79b2e4a8b0a9dcf31d1668dc6a5365b499cfb1dbf6e0f323c79bd8a1cad6b9de1771206e2e9ca16a9737d0da43d0d1c147c4fa402389b5ee034ae9e5c321bcfe4af23ba0b9", 0xd4, 0xfff}, {&(0x7f0000000400)="14c16701ef583d963e49681f534da93743f7366974cc4de9139632a6263670b37d89c24e82e3d0d4c6a8e49b8cd1130fba1889d25c1745a134311a94c88c52e63cfae8a3b8d8", 0x46, 0xc7a4}, {&(0x7f00000004c0), 0x0, 0x80}, {&(0x7f0000000500)="aa0ff8da9fd35add58e6c0b86d71731e999f1fc84048a0c126b13da5a76d4828c8ffec5b03aa62935037bb9ed10d998fc46ed3", 0x33, 0x5}], 0x80080, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x33, 0x0, 0x67, 0x25, 0x70, 0x30]}}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '),,:-'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:35:36 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="a6c9fcea898cccbc0e86403003d2d84307826c58fa6c82443dba8c5b1e924d8e16f37a81043e17d05aa03c5d8247150461c788a0927e21f1fc8ac7e5cc1b20214b2212afaa7f8bd4f0405bc391c8fad17db4785d4f7518126f8ccbb9f5f88a9b4136ef8a666d29948483e13a28f499fb2935864b7214658cd0679be3025c8f7fa486d2e587a228b326054ee5410055b1c4a0551822bfa2803fd0a13f34a1efd88720c53003ec93f219a467d90f99bee662bec9aefba8fefa4459b9a61097a73127fb4558932f1805263fb1eb901cbbcd38c9c0252de7b4a34aab9c99e0bedfe5f71b5982d1b1f4a254121da4a5d6ca70a232fad0ada8608a27c8476883dcf71c02b0a1d6ac1d1d41fe3f7f36ef47e5d20f695c190cfc32dee75903c5807dd1f7", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) clock_gettime(0x0, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x13, 0xd01}, 0x14}}, 0x0) 22:35:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x9, r7, 0x1, 0x20, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:36 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x14, 0xd01}, 0x14}}, 0x0) 22:35:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:51 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="a6c9fcea898cccbc0e86403003d2d84307826c58fa6c82443dba8c5b1e924d8e16f37a81043e17d05aa03c5d8247150461c788a0927e21f1fc8ac7e5cc1b20214b2212afaa7f8bd4f0405bc391c8fad17db4785d4f7518126f8ccbb9f5f88a9b4136ef8a666d29948483e13a28f499fb2935864b7214658cd0679be3025c8f7fa486d2e587a228b326054ee5410055b1c4a0551822bfa2803fd0a13f34a1efd88720c53003ec93f219a467d90f99bee662bec9aefba8fefa4459b9a61097a73127fb4558932f1805263fb1eb901cbbcd38c9c0252de7b4a34aab9c99e0bedfe5f71b5982d1b1f4a254121da4a5d6ca70a232fad0ada8608a27c8476883dcf71c02b0a1d6ac1d1d41fe3f7f36ef47e5d20f695c190cfc32dee75903c5807dd1f7", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x15, 0xd01}, 0x14}}, 0x0) 22:35:51 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(r0, &(0x7f0000000180)='./file1\x00', 0x6541c1, 0xb3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:35:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:35:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xf8, 0x20000000, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8800000) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x400000, @private1, 0x5}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:51 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:35:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x73, 0xd01}, 0x14}}, 0x0) 22:35:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2430.824893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13008 comm=syz-executor.2 22:36:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd02}, 0x14}}, 0x0) 22:36:04 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='sockfs\x00', 0x1008040, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x800, 0x9a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c, 0x80000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:04 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, r3, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x4}, 0x40) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r9, 0xfffffffffffff86c, 0x3) 22:36:04 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5e, 0xa2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x1c2, 0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff0f0000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:36:04 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2444.191428] audit: type=1400 audit(1752014164.652:3329): avc: denied { map } for pid=13023 comm="syz-executor.0" path="pipe:[45616]" dev="pipefs" ino=45616 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 2444.196597] audit: type=1400 audit(1752014164.652:3330): avc: denied { execute } for pid=13023 comm="syz-executor.0" path="pipe:[45616]" dev="pipefs" ino=45616 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 22:36:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40087602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd08}, 0x14}}, 0x0) 22:36:04 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140)={0x0, 0x165c, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x2}}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r6, 0xfffffffffffff86c, 0x3) 22:36:04 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4020940d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 4: ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd11}, 0x14}}, 0x0) 22:36:18 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x40087602, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f00000003c0)=ANY=[@ANYBLOB="022651c46f9469bf43c47b306d5be6c1e0a0fade552cd7c42d3636ae5e4cf7c21d1fd9637d0b9b050a0873c04f502b7d4281c0735575bd8d04b9849b8e56dd4615f0a41115d7b23d4cc5e07d9c74fb64ff0cb9bbafadde65896bcf3716a0e0eb10e6f1d5e53337c6ba4a8b8d389e79dc780c387aaeb3ffd92ed3c5df9a85ede4bbe83454c6afe1d46866360000", @ANYRESOCT, @ANYRESHEX]) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4060, 0xa2041, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x201, 0x87a9, 0x37d, 0x9, 0x8168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x6d, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x8, 0x45, 0x2}}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x20000000, 0x8800000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x2, @remote}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x1ff, {}, 0x40, 0x1, 0x0, {0x0, 0x0, r3}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80086601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x4) r1 = syz_io_uring_setup(0x4d4c, &(0x7f0000000240)={0x0, 0xfffffffd, 0x8, 0x0, 0x88, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) fallocate(r0, 0x40, 0x7, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101100, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r5, 0xfffffffffffff86c, 0x3) 22:36:18 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:36:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd3d}, 0x14}}, 0x0) 22:36:18 executing program 7: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x4, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:18 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) 22:36:18 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80087601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x37, 0x81, 0x20, 0x40, 0x0, 0x1a, 0x404, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x190000, 0x4, @perf_config_ext={0xb4b, 0x80}, 0x9800, 0x2, 0x6, 0x0, 0x86, 0x1, 0x40, 0x0, 0x9, 0x0, 0xfffffffffffff0a8}, r4, 0xa, r5, 0xe) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3000008, 0x80010, r0, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x10000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8800000) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r8, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x8001, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000280), 0x1, 0x0, 0x1, {0x0, r6}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r9, 0xfffffffffffff86c, 0x3) 22:36:18 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2}, 0x14}}, 0x0) 22:36:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3}, 0x14}}, 0x0) 22:36:18 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x4}, 0x14}}, 0x0) 22:36:34 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x3, 0x0, 0x9, 0x1}, 0xfffffffe) lseek(r7, 0xfffffffffffff86c, 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, '.\x00'}) syz_io_uring_setup(0x3e0f, &(0x7f0000000280)={0x0, 0xd72e, 0x1, 0x3, 0xb, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000400)) 22:36:34 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:34 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x4020940d, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:36:34 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xe, 0x0, 0x0, 0x0, {0x4cb}, 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x5}, 0x14}}, 0x0) 22:36:34 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x6}, 0x14}}, 0x0) 22:36:34 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000bc0)=0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) sendmsg$unix(r5, &(0x7f0000000d00)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="ecd5b3280701c6651fb7817347d6927b9ed2f411d986fefeb04cb085659c16925d73d1ecadb65cbaf55303b965f163488e77024e3b315b042b67fc17", 0x3c}], 0x1, &(0x7f0000000c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0xc8, 0x20040040}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r11 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r11, 0xfffffffffffff86c, 0x3) 22:36:34 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80086601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x8, 0x0, 0x0, 0x50800, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x14411, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x10a0}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x7}, 0x14}}, 0x0) 22:36:34 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:34 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000180)={'netpci0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:34 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8}, 0x14}}, 0x0) 22:36:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200041, 0x102) r4 = syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x80, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000480)="57c045086a79513c768f7a9e7ec199617d49d87c584e5e5b31cc5a76fee0d1bb6f6d44a8ff969ce2878c038a7bf61426733224787fd7d5a82ac4677ee752ebddbfcc3cb1eb5466dbd777bab026c9fd4cdc7b58d7737dc4ecfd865293b488b3413f14cbc77ac0e6ff00704b39c58b597514a30394ad26faf037eba563d7dd6f5cf1318510068b4fef67a980baebd28cd0b62f617667ced5370d91c712365e98952c799a94ff6d751def1439b2185dd16b6093faee47eefb9116559aa8daf2280d6de199c04bbeb884edee15faad48607c36ebaf", 0xd3, 0x1}, {&(0x7f0000000280)="1b8a0a758c8bfddc74aceaf9c558a0afe439b03e035cae1b42fcc0a581e785a2832e0b52eb169f92aa62ba5015ca87f87e0b0f4e85b3689a01146dbd076ebbeaf86487171c593c0df3e6adfcccfe32e9604d756cab232bb675e82787632f2aaeeef1", 0x62, 0x43}, {&(0x7f0000000580)="b99eb3bc0f48cb98f8b76ab6992e0420e1a736d5ba13e9d2c7034c05ecad8e4115839f5abf9242e2558897bcfd8d7c4358b9a77ac98a6126f4b9b2835ce4b2310b5328de", 0x44, 0xc7f}, {&(0x7f0000000300)="82861c7fe90aab3b48a38c51b1b8a0006f0665942a488b6126aae2ec736189dedc3d2c32a1c23b5c31efa5cb6c4f77e94658f1", 0x33, 0x3}, {&(0x7f0000000400), 0x0, 0x4}, {&(0x7f0000000600)="bcb9595cf4a07e3341c4047a", 0xc, 0x6}, {&(0x7f0000000640)="1f32fb76d6fd5ce2044b0294b4996800faee32fa86d642f021a1b7f421a8e3b7682c83696f01fe9484645152fad16106b40d336d8f048fec0d5bdf6757b4242f6e", 0x41, 0x71e}], 0x1000020, &(0x7f0000000780)={[{@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@seclabel}]}) copy_file_range(r3, 0x0, r4, &(0x7f0000000800)=0x5, 0x9, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r6, 0xfffffffffffff86c, 0x3) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x22440, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80087601, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5e, 0xa2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4281, 0x8000, 0x2, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x8, 0x4) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x6, 0x20, @private1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0xfffffffe}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x9}, 0x14}}, 0x0) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r0], 0x1}, 0x7fff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf}, 0x14}}, 0x0) 22:36:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xab}, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="6806dca070b56bb4359123b410f80501a68c13e03b40347d5305583a1b2ce4a8d5648907b37eed452fdd9ab99bfbc7fd851fd6ecf85660c45b6112a1d82e2c107773ecca5192b09a1e15af5e242b882c51589c242b32110d7522bd491adf10530b966d53e250f8bd5eabfb77f20c786d8bb2970ba9c106745a6905ce95bba95e31e4de78db4eb0f90dac3496f20f7ee69694210e86ef0f28e413e4a7ad51b59ca63b0fa475cebec62b44612a0c0266fd129eb989e6f4a2232d1bd8640c23f90a776b121571e7d10d935cbf0ab025cad9964eea8e7c46c7102c58ed116b82", 0xde, 0x40004, 0x1, {0x0, r3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x10010, r0, 0x8000000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r5, 0xfffffffffffff86c, 0x3) 22:36:51 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108906, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:36:51 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fspick(r1, &(0x7f00000001c0)='./file1\x00', 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file1\x00', &(0x7f0000000180)='./file1/../file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0}, 0x14}}, 0x0) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x1, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x48040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:36:51 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r3, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x1000}}, './file1\x00'}) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x84}, 0x1}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r8, 0xfffffffffffff86c, 0x3) 22:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x300}, 0x14}}, 0x0) 22:36:51 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:05 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f00000000c0)={'ipvlan0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800003) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x8b}}, 0x8000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:37:05 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0189436, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:05 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:05 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) finit_module(r4, &(0x7f0000000180)='ip6gre0\x00', 0x0) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:05 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80108907, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:05 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:05 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0xc, 0x1, {0x2}}, 0x2) r3 = signalfd4(r0, &(0x7f00000001c0)={[0x4]}, 0x8, 0x80000) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@phonet={0x23, 0x81, 0x5, 0x2}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) open_tree(r3, &(0x7f0000000080)='./file1\x00', 0x90900) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r8, 0xfffffffffffff86c, 0x3) creat(&(0x7f0000000300)='./file0\x00', 0x100) 22:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x434}, 0x14}}, 0x0) 22:37:06 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x500}, 0x14}}, 0x0) 22:37:06 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x3, 0x0, 0x68, 0x0, 0x8, 0x9090, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x10}, 0x120, 0x9, 0x3, 0x6, 0x0, 0x80000001, 0xfff8, 0x0, 0x6, 0x0, 0x9}, r2, 0x6, 0xffffffffffffffff, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:37:06 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x8000000) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x30014, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x3040a, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xd2e7) lseek(r6, 0xfffffffffffff86c, 0x3) 22:37:19 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:19 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000010, 0x20010, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bdev\x00', 0x209002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:19 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0xfffffffd}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}}, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1f) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9}, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:37:19 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:19 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x600}, 0x14}}, 0x0) 22:37:19 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2103000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:19 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc020660b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x700}, 0x14}}, 0x0) 22:37:20 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0045878, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = accept$packet(r5, &(0x7f0000001040)={0x11, 0x0, 0x0}, &(0x7f0000001080)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000001c0)="8653424b60f1", 0x6}, {&(0x7f0000000200)="8e13d799e2dad0f3e39052f2fd3dd16a8770c249eac367619dc6a3b3f2de777f06e47c3694cfbf3065dcbd9f931b236b7cc583a793e24fe909aea4edac9e63e936a3c8e16664b19eacba836034d9e43740cdd911a9eeab57bb2a5daf024ce1ceb4287e63c9bf0798f3d650821d7b14", 0x6f}, {&(0x7f0000000280)="67edb96d51c543a05bc5095664f9ae4632cab571c3c96e6d92634751f6d1c238d06e0b69e1b6c9b8776902b2adfc00f56f5fd4e9dfc01e184da72acf1f52e14d4706eaf87908ae9752a8556bb4b675b4d8461dfd43aff00b90f12f8522828049c9", 0x61}, {&(0x7f0000000300)="8c0614f8d51f7fa7a362a79a81b37a8b1dda8bf29aef9eb0a6087f24c0b9641f4cde9fab0d0dd0db94b04b6e22e1ad97188bdb7c76e9105c52c35f7eff5d398f1baa6a9dc36c32bba91e18ec58d6114dde647f2f0563d49ab445fc9820a98d3fed061a73fb68bf80b1864ecb223dcc24e04c2e4b15226a2082f3a001a6abe496f3ded663341dac74fddbe7c3733413329e4c5d41a4e671508ee4fcb63ac0be4b59749e1b9be51973c39d25f8f376e63c6c236a6814a3e965646e4b997841", 0xbe}, {&(0x7f00000003c0)="b6bbd48ef63bdead0ff5c69b94dfb70790b0fe435e6612f84ae61abe89a5eff588543aa8beaf2380171ab0df255dffd669b13f82981e2fa33dbae6d86f5382441fb8f8058c3f7c5e9aaaa38f0cc8f907527dc836b55725", 0x57}, {&(0x7f00000004c0)="d22468b2d98a6489232a307793f6781a38d45bbf3faa5eb134b87f58375e3dc105115127e00048a2630271ce282161862b232f67e5d1330d925521a75ba32ddce1e23b16a270104b517304bbf3913217e798a279112952139168aac75fe7cc5266219fb9d2ab348e79ab060532901106779b8985b489d66f2856315b7ddf854caa0d5df77a943b1300f496c5e8d095c978edce8f7d7bbf515bba2e013cde4062a9a086", 0xa3}, {&(0x7f0000000440)="75d10e55c1424d4e9b12147adfa6d7b103713e34c3cf2015eedccfd844828b0ec2bb0eae46", 0x25}, {&(0x7f00000007c0)="ad73657d8749ad87e85ea4bdc63ac3c38979829d9893aec419090d058bee82295283ecb18ee1164cb38c4a5c4dde364d20d37a129b75a9b0d00af53139680521cb0a1332f851929aa87dd6ca550096e6d8c5613fbf53384859f504dc0eeb0cedd3f29a4c2e4e6b90f054335432f6f0aaa1ab4fbadfeef3ece62ce3b2d5c94bbd4bc85e945cc7347dfb03e64111b562fc1057d8a1fcc1c5f0c8fe219e38865c0f323a7547ce37d15e86b00563bc6258f5f08f06d4d418a15ff474339588ec049cf771a5801fabd6df136b1864c931792ecd2de9227b0e7d8496334cc47aaeb3c22d", 0xe1}, {&(0x7f00000008c0)="6cab3a8153c1e731c0e2c541ee9cb9bf5e759ab68767a55ce137ccfcfdb15003ec7721d86c035ff51f97392cdd64ad253cd2a3222604f98ad639fd60e8826cf984d4ffd22e811eb0eef152f174ebfc2ed7a038cd08871a41972b8c4543e76e0ef2537d3a61cf4e54984c615008e5c99cd8e8471beee22695797981ae0088a4879cbf2aa2f999789cfb3e8e49a7baca099fb1938a48e959bf94af558b54443b5c82d9f64569ae629809fb9460601eecc647365198061e2d16b8a5acdb16482c33603c6b23a2fdb7a0f670e499d1384bc66faf381a00e9b37731e483b97b1bb2363bbae9d46d86", 0xe6}, {&(0x7f00000010c0)="0117213638ece5d87228d375d7cd49a16c23f6eb60270d2b28fa41469a243e3f59c19d1ea06e0a0f8f195c8ac403be524c34633c4f146e8772bc48848b235d11d8a7c74facf673d987f76458e09dccc7cfb8898f198c94baaad097c6f85851b48572774c9cfe26ca54d94e1c41ab5d24ac79a587c88f29c120", 0x79}], 0xa}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x80, @remote, 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000009c0)="9c8c37d098279bf78cd9967f15942d24a03e566e10cd6ced36f272d6476637424513ff7126b0bdd6b75f165248a7bfadfb660b5ceb6df8f6ba0767cef556527cb4b94e627382be288b12183ec39222f252b9fa75a43dd6dff33c40ed038865dcd5af523c3e46bcdd10b8417a2212bfb3917e613ff56f7d95ffe02d0ec36d6350e6856f307993a0eccf3d3c", 0x8b}, {&(0x7f0000000a80)="263d1a4b8443ab079e038a7d67e1cd936b58eab6fe46179245a69ecbfc755ecf57d6d22c8ac6505fe09c000f1c606b7350e518dad0fa15dde982174e8b84a07787eb879984c519a6dac58c025db88c6c847a15db3f296e333ee56d218f2565cbd592242fa6d0005038a01e88a1dbfad76db1a8cb3f17ea10a6f0d182b9d2041e55c24d", 0x83}, {&(0x7f0000000700)}, {&(0x7f0000000b40)="d47de9e9c9ba8bdbfb5c719cdd1e153029508fe862664e3a0c5be673f4e6594646c2bcfb0ec3ed28de59d1451fc704d1c127343534fcde79cd8a313ee595c04738d73ed5464a48798e9e8d3b4e368b6e96c1b97d2f8abd48c4526f66daa3e3a39e14ddb43f2c7216ab2ab256ce4355649c2c380c0b7371929f2389a79635731e7626cd9e248c947caa121a1eb2c4cab88df4dd6fdccccac243f9238306ce31d4ddd22a10405ccdde49294f66eb959fb379e8615f2445341028cd60f5bfdd3b7263fc98fd8c0d", 0xc6}, {&(0x7f0000001e00)="aab13b7e5e9142d5041b4c04725676232ca8668712c7f3d394c3ade46aa027586c1b74107e63e9429bb3e902f9e69eb4e7f964453618275f967d5ed01b3052b6ffb8861ffd865abc446182bb0106514baa948b9dc7d28c620dd449647d198476c645bbe07ab0af832a52ee74e718cebfa074b97084a520f17eeae17be9c26a155ac202d60c31b7d4126dbeebda776d19cdf5fb4b1ca379a5893490c595c1008dd851e18c8a61ba5bfd2b2ffde6eb1f1112360f423b3b4c1ea493070262c6ed475972ec1b18f39ba9883e0b61b7af87cf640c8fc2f09ba9abc935cb736532a697f24b5fc24d8a0fe59514a432521c8070c78b8e5c5a1234b25916702292a985f6ae3d916e527d2841a138a3250f3483196f2ef5e785fc95cd536bfc1998deaf61da2aef7d1a586d919e91380bb3c177f985f6e2c56f5f00ea51b713547549ccb78fb8f47a22209b3eae2102ff48a31cd94f847d9fc6d74ce6bfa1190f2886816726eabdf9d006b8fa839dfaae2f53aca8a56d15bc31b350ce0ccb2ee94b54c9768be08ca3812b96f27438bce5993e85b777d7c3d18fd20534bdfc377876b673c98b6ad31a614ccdca347197f613d0cd5b744b46c7e6d1a77d17f839f3eb0eca79e35855d6460dfc7353dac803e1db937879975782db5f2c73e85d8555aa303e255ca05bc64e5f326b6546645530adf7f907592603a5f02824c24a53d0a468c8ab231e5ad1b1beaf60eb6622e4932549a97f55d3c6e271f34e0f405d30b98bdf95348de1bab13d898aaac247c8e45a21a9845d30bdafee3540bbafd195d9920ba149ebe1776423d8e94cb1dc5989867299178477d1b5948497d7abae0f4447c7c78b8a02dc3108ac50010ba58c659eaaad108c71d0c1c3da4cbd3081644f57ac18c41a7d94201bf6eb81f5cd27d0ea09b170ef25c2bca88a2c70d208d816ebf48570fdf7c058ea8f4a9540b8387fc8011e5e16079becedaeda9f7dd61410974694a1302cc0789655d1d0066c200cb9ce6bed9cc9d97c67fe7b5e3455b2c64bf0ed3b7b6d64b393333ee0a7485fcd17490b1b57eb776ac804bc9ff50cf916303bcf4be8e5b064604b254ff24739bcc47adbe23260950dfddd53f4f26884aa816ca21b6c71ebb97e1b7b8d1aa214e0415b43a2c450d2555ae953bf7535acfb8bf214f5e41f7e48bed3cb5460e224b15a03d22dd7483b8a98d531ffbdd36e030e7d20d6a8f3ca4eded625cf7bd0be44c86136f5817188d8c7d6ffbcfd253e6a150084d8ff0a8c282f5478def63c3525c651310ea6dfedf3200547a3954a43719ca19869646948e257e7384e73d1507b33c54409ee9dbd98a5d04febaf4fe0be002f28081b10d7a1a4e83277992c0568bc40ec01b6ec5e74c864619dfeefb875d5305a4b79404a04125973b31b1aeff14c0268c5fe4dfd37b9c7f13b1720be1540e0d476ee724dc33792392e36ec1fc9e48cb01b91b0cc820bdd631e89e63348863d5d333708a6a20a71302ebdf649603efae63a72ee4d4be6f103d912704c441e66b7e3fd8b9f3188c64e9a23cb655af284f96d1be7c56e71e29616a731878d790626f087a9fafa3af9c09822a167934cb7fd76a96fd53b422ce5662cab8a4a235d95c4d73b22c6625280c203c60a998cbe85e209bdb97a5e6f1028b08b16c730689a1def1e4310cb0951f87fefd3cae436b81de1361fdd66efbfe3fc83169742fa51ce0ccacfc645f6d15b913bb57f68ae3fb57aecd29b7cf1a663f9fd7b5c15d404067f4b0d796ab4e5576b26c0a27f86a14a703cfcf28f3eca46bbf330dbe6d17366bdbfa5e7c6035d31f3509f86175e3feb7e895e3b721231b7044bfcb610782ee047512862d7ddad698baaf2ec17f12bf9fd11850da185d065846fbc95512b3562a7d7a1e07f24d1aa21723d648e2a820fcf74f56736446543a61de19695c1cfe253cc4c26ba9732895ee1ed4c0754e858501db7f7d88eedb300a64ce800eed369e795295456bdb90008408bcba566005915a9907dafb612f6f7b0c1958ba1b36a018705774d29c3710ad53c70cb039572652ba8dce5fd090fcceef2e147040c6110ab84fdb38cbf3ab4bac7def879efd23f94a3979c45b2cf81cfa6ca80ed873ec0061401eff5d09ca02e2342ad47e3aae66c3e2d7eb2587ba1af975c4318f006b4b91f54dac78c3d180b6e63a02ada61037a574ab715ee0d80d40fa0b640675afc552b0323a58acae309b4b9f7fc7ae5cda6c6f1c7387aac594320c81d723ca53a471697671538eb7f73600897b9f133afa50e5aa87060e9cae0887e4562a070811c382dfa6f729b2fc6e6c62346dd6093204e58031db5bc70912a748965882061f7c0c16909bcaaa94a068ae2e728465734e10f455a96cc715585aa325c4afde4b4da1843fe5035c15d0ab31a850ece51c7f6775ae43f6aa29262b676f1f31c1c5f26e3d5a6952bb033823e99447bb6d0e6e7c72a99f2ece63e04ea3c8d3dc70d625a06e91d07b6958b68338905cf90fc79807270001d8027b6f654aa4864d3c82a7d0a37d0abd76a74797b93fc35d13cd496854499aa89c02ea2b05ef2f8e62cd3419c4089707f493553774ff5f6e147cef0a7f5ca0884c85f66c98dfb03f930da1f30a6ac90e6d219e69f4fbfbcade1363aa5d6315bf4deb04f46d90b1faef2558cd55d06a1533a6a67a0dd844e1ef9e058ab402c2676e72c7df63f512624b2bb832535b1874166637d4166b55f8532e70462463a6e401a66df57b61849d01df81560341705b83eafb913d4b46c1a72da1c105da841f752a3f3a075e967629b9eedb00e8d6d9d4c90de6a0b5e4a443ad357ff71c35996d2fd1c822d6cad634cfa3a3e84e399fb2d7209aa513de753709edf0abcfb14fe665620f4d43c6fd01801f1ce9c337128566426c1573fbacafe7106630741df77c65c56c0809f5d457dc1d2491203d45f43870d9b2a4dc4387acf6adee1f358f24ff000d465d634b6e75bcfe09cc666a9b2eba1141071a5ea666e089ee2fe2731956a7629b740c57066008b146c626e73ff4d14f070b46c23294aa044ea4c132228490a1de044df4a7424e37b50cbf70a809be574f3b936f4cb78ad4a5eb05de084872b9bb3a25a99cd487e6b777f25edb47b6f7711a84bf9752b52bdd19400d098c62efe767524ed37ab081780cf4471be396a17e6524afa82e9f6f1cec44add2f760468cf947fac3bfa94c1082e6d03e1d987ff6a55b204982d097f991bb00b50b21c3c079c3acb084bb723080d31d55b710a3b79e30bc1980e794cb2dc9e14bab81a9cb34b5cd62a2554dc0a9d6d90ab489aef05fc562e2b6588fce305efba9d48724a286815d29ad5d653fbe9a9ee7db82389d93467303068ce40e0b9478d5fa83f4b5c75446e14e4793f6f8ed591a60ee50925ec120245fd86cfae17eb2fa2a2fe72e2699a98f66be6e1ce5bcc5d587cc15a13d726261965ccd946594fc069e7647370f7b367cfeaa953f7ee9730fa6a267b5a70503cd007ee549cd373049e03c1498230563e4f0200b0c373e83a3aff660b82c4941ecd8f564944a6462c9d3b30a9690d77fcb6060f2ca25505b040acb86a1d2e19b193405cdbfb776f8869c0313d17b426cffdad8e3d969ed3eeba0ac5f0f073b6ada6245c14cb490584794f118024e145a65f85bf87da207aeba4992226fbfd9096aa8124c69f63343f8dc7cac75cb25fa32865a30de07c001c2ca7f2c3870fbb86717adf924f0fe710459eacf8c649057f3221376b7452e29df2866a978b173f42df1b4780814e059beefccf66a983328fc3174699d282762fb6b03d28bfa7a115686049c8d4264e1b4d58502630478d0e81e946689fac0202ab0afc75e415e11ad5d7888c511f1f2c9a7194debb20e1b73d5b1c5bb70b477351b2f332fdef548088ef47ebfcd7951084451d4750620e0843b10ba7153cb1c7c783b023639f01427563506ddd00368a376c486c0d78c7e6fa12acd35a21652303d83742e563ad9cfb506b5fd2976e6cb4e8093b661560ee58ae3cdde410bbc4bde367f8d26edbc89056778d4c24fda962a901f1ba7baacc903e432df40d66151914c7341d0eb7f7d032e53d28908851ce49e3f95fc2dbc3d1289de7a080e543814fd925dbd20a9d8eab6de94713669d550d231de2e7ee696834f7511eeedfb0e389ecd56200b25ef54c13299ec23d147828fa6690d5793cea3eb445b17e15cbd471e2295a9878bd7750292722e63a61abeb5658ea2884f6fe4e17f81a27b1c63b807abacbcd2226b4c32aca73a23ae9154f24d69c98884aec6fd11547c834ee8c459f301e7788276e0f8b510065fc1aae2cf6201a1606d12d1fb6475c743130f55ee7a3dc5eb497eee96749a7ce250327c521ba733ca1fd9efb002ed2bad2a86c1bf48cfffa332e7daff880842a3c59ffed8dd0054a6b92ce9f8319e252d53e561b141f1fd42c3e0cec1a3fa46395d0d54a52dee844deb4a55f707cdbfc7f435c943ad46d166f81e82e3d6931a6045f9393d0fe0620786a234d33480ac1fe0b3677331e1b737e98eb8cfa97b5522e6c78ae514987c2a3dbc39959f4a69fde6abb6aec81764c5bebb6c9d10354998e5a6a8069a8725f18abdfaebc9d7904832ce71582e2702a6b631146cf994620c39fc20be6243dfe5de63efb5dfd4de9d2f1995377e47d3eadf0ab3537a63c95e48247dc6bd078ab850a10b4772afe0367a725aaa1db36fb30dca8b6ab07667ca1cba1893da3c3be16f1f20a441e54ee4177b51af81fa9c7bd2aede5e7fd0668ca56ee896244ee0e0376e089570dbd35f104dcb010f070078ce1f51f0c611a18dd0daa9e872297e7ba2750b8c07460098799a80d8c384296e0d90410bf42134969342c65d0a0eacd05c830250b2179ec6ac243fa8ba26ce2e909c19ada806c076b60b43769ed9ac53f0ed72fbaeea41c6747813fe36e583fba740da9d682842ff1adb39f644c43520f2d1354b172833adc10aa43a6447a7dfca6574d9803b0e0a1d8390b3265ca5e94d3970998ed8726d0a728afe04925ef5c52325125fcc08bfe4a1994ba08b9f77a982e5f7ae9245161b8f32906c568f169fc5a3adb9910386512937c038c03baf12f2bc0aec62f1742dd4b1c430871e6e4cab51dd5b7c18fd757c7daf194b73112a999befb2fc53a57579c8dba80bb763671856bdb5772b94fa030d3d02b0677d8b900ac6669d64b49d26b924264804c7fa810b8016743860dae5ecac7ff75e4947fd5053f91fce6f2d54f20f1d09a1dfc837828a6904cb6466aafd0ca91ecd874b8a845b4bdd24146c17cc95689c1c6044bfbf16e5e523aec3d92d41eccb336f45fd47d25b17f03724d41ed74d163b3d3f85b50bde218889970a37a41ad65f3e820f48a95a2c5afebd7506c294dd848f67f6092a04d40b693495679f8680bc8ca20eb8b46cb9b9ef5bab50615305414e231610062cf83b2accb395cd27925809c48ab16d8549e94654d27155e73b66e1e0375fb59f4e6f2b705e831408107cecc22c6131b23a1938071ab3ebe6ed26422bddfd16437c4a9bd9e33075d332c41804725fd95d95ada61754ad2ae07273753816facb4cde57717ea5ba9350522963e72b355d6565684fec3c957e971c7320e8165bd0245fac73de15fb265dfde9d94dc0ccf3563c53dbb221ac0c13a9879ba6ad7b5a6cfd6b04ef06003ebee707cee5404bc66cf68d9d3954a1e0c60639310f87093c039fbe8379eb3128d5e9f687c031d677237cf834adc6a2f1dae904ffca9bace0b01aa3010a00fba5ac3131756", 0x1000}, {&(0x7f0000000740)="80446aa8fd148839e850a7c53dd8c9c10dcbfb8d4ca959195259", 0x1a}, {&(0x7f0000000c40)="f6851372e60960c2560edfa14df62226f395431a8834406d9e585a7b28d24a42b50c0ee9e11bb699dfb4c87a66706321fe74eb0fdbaea0dd9a05654777654dfc51", 0x41}, {&(0x7f0000000cc0)="89892562b0c83acdc524963edb810097a611c0ecf4f14e5eb2c218677f421d72e3e5275562069fb2a6eb0761f38f880c98e62edbc59dbaeba1a3d9dca84060ecc780521ed96e1a332156150e1a47e727a81c15ddebf6ebebc7b17133ba173e1e7c1a1f82ba83a2676b3af025fe0d0624a9567587325f121e8144f713e6fdaf24bc1feebe87bea4e2287c9cebf42cc3f7beed15edf9ad35c00a870507a5ee6f8cde43f0f28c6966431c8a176352bf1d78d37e56e590e9a6069b879b", 0xbb}], 0x8, &(0x7f0000000e00)=[@rthdrdstopts={{0x98, 0x29, 0x37, {0x88, 0xf, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x50, {0x3, 0x12, 0x40, 0x40, [0x0, 0x3, 0x7, 0x5, 0x8, 0x8001, 0x10000, 0x0, 0x0]}}, @ra={0x5, 0x2, 0xbc1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x20}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0xe0}}, {{&(0x7f0000000f00)={0xa, 0x4e24, 0x972d, @local, 0xffffffff}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000f40)="292706ababae2b669f87045b28be05c596bb7aa497b0713df052e0cc4d5f62d65c3417ddc082827d8a28bea5f212ff05f2a367cb0c03f43109de63b8a88a027862d853e35d7a2e543851894984e5b4527978a300f51f845ccf1e392484c1c51179f7c36226bdfca83808ba6e6f5983416fde5a953e628e91e152905554b498796c680f26ece1ac52eb30aef6066a2f979495a416276e75060b8ea0242c8b1e895a7905b97ac50eb8803a95eeff1d563e88fde9892c901148", 0xb8}], 0x1, &(0x7f0000002f40)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x24}, r8}}}, @hopopts={{0x118, 0x29, 0x36, {0x62, 0x1f, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0xfff, [0xb3, 0x8, 0x0, 0x5, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x1}, @ra, @generic={0x1, 0x69, "1c1e355a4411be90045d2afb04504594214e8ab5a6a6b19fdc41a7c8a89217e3b96717cb6190ea631d5ae0d5b1a1fea58ef49ab513aac8106d49759cd2b2415e652bfb330f72b24c41da1da3628e81669c50f3ec3267235e535d857aa531e2ce5832644f3a51d8323f"}, @ra={0x5, 0x2, 0x282d}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x101, [0x5fd, 0x100, 0xba, 0x6, 0x7fffffff]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts={{0x220, 0x29, 0x37, {0x62, 0x40, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x400, 0x3, 0xd0, 0x8001, 0x10000, 0x5]}}, @pad1, @generic={0x3, 0xd5, "0b75ea27bf90fbb9d890c77571a3363e386c45dad6d42bc0dfea0a43d2da942ff3a53621cab7fc861c78125981104b64f4f8c08fa4bd77796e33d0435734844b43cd784a61427e9244c9d3465c348eca32824ca928097e873dfc7868dbfcb22d6f56f986225de3776c76676f8003d52a8ebb82d0d1cf1a5696359c701db725ac2f30dc8574707d6a3a4125541f1355e48298a982705c6b8548684fd3d66e655d4f08b62a885788339f12ed1baa8d6521e716d9e85c2b06ddd5478e15dc105fd58e3695dccd9fa34059c9c001fda89ca2c083e75fd6"}, @jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0xca, "38327995484400d0d333858e578728589dced54cbb8a739d0c0fa7aa48911e313434f0ec554c755d704139b362f6170a86cca8b13309439e9f6d8dc15c0252d4e6b83626bc5a6352297c068a8beeaf1d9c82c3080696cb5dccaefe9890850d95c8b32c9ddbba229239e957a32c52c8efb74312baa10142e964b9741013046c9cdfaf7dc7923c3d0caad8f5016255657fe3701b4a3d37297d831648c209e8d4a3359a0c1d0805228062af9a5b2ba1f508af24c70ccad6703fc22e5e8b56a9fa4c4e250d68105471bdcca2"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x2, 0x4, 0x0, [@remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x67, 0xe, 0x2, 0x5, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private2, @dev={0xfe, 0x80, '\x00', 0x1e}, @private0]}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x11, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x800}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x26, "74f8f72cd90f5708b266918380ef72bd999493b25aaf5afbda6a8b3434921ae7e661e02df3a8"}, @jumbo={0xc2, 0x4, 0xcb9c}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x20}}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x99, 0x8, 0x2, 0x1, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x568}}, {{&(0x7f0000001580)={0xa, 0x4e23, 0x5, @private0, 0x3ff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000180)="b70c44989bd93b7b6a4782ce3f16f26169720ecd1be9c99f36c0e7cc819b09db2a29bee3094677f363dd5355e0c7c4cde3fc8a0f43b367492664064d4dad01", 0x3f}, {&(0x7f0000001600)="cd546a3aa020f5e7df7c9d71c367752a97d3084ac9d7e1bbfe81afa2b1a3a6302ce1abc2ee7087a9ffd747f50993527ccfb1e796033b80b99f9ad097c5b770dcc8090ff203f39462bdf1f1751101dc434df02900809a8169e851f817deca0927368e276b8233258ee6f5fde5e7e0037a1b6e8d14730b4b5ffe0254eaf355481ed709be2d83d5ab4c3921b2e58bbc6813edd2cc3b78272b3b1d", 0x99}, {&(0x7f00000016c0)="f900c29cdaa78a946bc01b3e85579f1626092548e04cf2c8be0f8bfa3400a5ef", 0x20}], 0x1a, &(0x7f0000001200)=ANY=[@ANYBLOB="b000000000000000290000003600000029f786776c000000008f0606c4d71a09da9c6ad9f59e2bc98c652c9caa82ac2f72f6b609c8da21da1d62a6af0e85540d7debdef754d3ae2bdd76811b92e343efaf6497e3e29d3991af5e2796d111335fc9a56648afac1dbb12e18aba66de31471ab274b1e57e26845b9d101010f0b47cb538657ffb397dbe7f294e70ba6a9932658c183b9b87f963dfd06abb7e940ba104d975b700000000000000140000000000000029000000080000007ff300000000000000000000290000000800000007000000000000001400000000000000290000003e0000001f00000000000000000007008980fce353f2cc8922c33d1d1cd0958596868bedb150b82c3a982020b759297312ab70914ef47e7ec9a79c39b7e3eed21bc16117302431383fbb222f909821016790f863b2c6f1c7e9e4972d45dd77f54e2cd6bf614ddcd7ee50c5650a25782a94c6a25f7a49b5b3e751f4618cc788aa9fe90db04bcf216505000000f9ffc4d63ae417443c65fc5e3866c9"], 0xf8}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x5, @remote, 0x8}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001900)="6ae3c805b76b9c70883330a626a4ace71a1ed650f94fb2f92f20b37ae06056bbf4fa79f760f40040b26e1a218b4da1fc56991efe0a97f34f15867d0841892c470a7d4f4ecb28a1d41f3170677abd828b8de752d74e292e7792c673343322451ad13a61d91e0b2327fdf28e9fd5c2e04414c67c36a3689e9ff246b16cdec9b397eb6658fff2299c3419c67e4f0cde4379229aaa7d2a4a3863123b59b52d09bc59a9191e2b892eca53599c9e18149b4e7d8c0fa7f56864e4880473ce07d196ff294cde3508cdc2ddb5bae1cea080b33a198dff21c6b84a0b0a", 0xd8}, {&(0x7f0000001a00)="ea1ea24b381e88345cf9b0aaf8f403ae47fe4b637c0beba9db877eea98d5f546da4ef5776b54b494c4dbd7aa69f66e3c02efe2fb5990dac0900ec75e9f641c96ed981819bde8f6612441234f3393b0899cccd9783486fd21b08687608373d8fd0016883288dd5a14396d97ab665b61e57b0b9573209d529c26578956", 0x7c}, {&(0x7f0000001a80)="7ea9882da20e48f6fb40a91b64a69ebe019092dd433e1a94d73b80a89f8fe8183014f674d9064d3a0e5d8296305dae7e40e56d83b9b0ebeb95e557dbf52598b15645fd2016d27f295e82983325d4cdec31f8e1f695217218eba18ec90680bef738cab5bfa51757aee9c5570f14f30d58814bf3af8d53fdfa0a137e4edd6f99fed07e0417971cb7c791d025e0e1dc1c0ed3459084eafbe53b44463d836a10d6254bc9fa73fc49fb42700579988ffb898971fc12b37473a4d27313ee2a4865d490a0a28f071d97e1893ea061", 0xcb}, {&(0x7f0000001b80)="3470bd9ac70ecf2cc7ad1d098370407225dd2e265d9742bdad35a4f4d830eccd204e4eaa83774a94a0d184044ed35298e9beb6f6e09f6edd0365585492f3fade58da72a54d3514bc2c1e46f48f5b1493c75238e2f1e8983738948b373081e952fd033abc62987130a06c3819f476e646e32c87816f99cac42e3a39610df8b015560818d10280aca4bad200acabc6aab79b4120641a2611665cd3f10aadb2f104734d970d8d9503b9ddd4e48d2df6ae0739bfc45f15a74779ba55fafd3c1a83f736174ddd5d4891bab66145bb1b5d44f41876c4004e4cde94140467ce", 0xdc}], 0x4, &(0x7f0000001c80)=[@hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, '\x00', [@generic={0x81, 0x20, "946f5791439212dcc151d9da40d6cbe00346a2312055c920aa97024ff7eb6d84"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x59, 0x5, [0x100, 0x39, 0x3]}}]}}}], 0x60}}], 0x5, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000580), &(0x7f0000000600)=0x68) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r9, r10+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x900}, 0x14}}, 0x0) 22:37:20 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}, 0x8001) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x22c240, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:20 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:20 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3400, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x56a6, 0x7}, 0x12243, 0x100000000, 0xced7, 0x9, 0x2e5, 0x10000, 0x2, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x8, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000180)={'macvlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @broadcast}, 0xfffffffffffffedd) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)=""/4096) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:37:20 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7f51010000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xec0}, 0x14}}, 0x0) 22:37:20 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf00}, 0x14}}, 0x0) 22:37:35 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x260c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r6 = fsmount(r5, 0x1, 0xc1ef83a33e4e178e) getdents64(r6, &(0x7f00000006c0)=""/4096, 0x1000) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:35 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x6, 0x0, 0x227ca548) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000001c0)={0x3, 0x6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'sit0\x00'}) 22:37:35 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x110, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7ffd) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4004, @fd=r3, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x1) syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0xcc89, 0x0, 0x0, 0x13b}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000080), 0x8001, 0x101000) r8 = creat(&(0x7f00000002c0)='./file1\x00', 0x100) fallocate(r8, 0x0, 0x0, 0x8800000) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f00000001c0)={0x40000000}, r8, 0x3, 0x0, 0x1}, 0xa9) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x107) lseek(r9, 0xfffffffffffff86c, 0x3) 22:37:35 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) futimesat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc0189436, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:35 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0xc020660b, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3404}, 0x14}}, 0x0) 22:37:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:36 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:36 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x94800, 0x87) 22:37:36 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x30, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x1, &(0x7f00000000c0)="74fa5a5891d3208b28f7", 0x10001, 0x0, 0x1, {0x1}}, 0x0) 22:37:36 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:36 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x3, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) fallocate(r7, 0x1, 0x180000000000, 0x6) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8100}, 0x14}}, 0x0) 22:37:52 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:52 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x20, @mcast2, 0xcc}, 0x1c) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x630002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0xb}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x44110, r5, 0x8000000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0x7, 0x9, 0x0, 0x6, 0x2000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x3ff}, 0x20, 0x4, 0x833d, 0x3, 0x100000000000000, 0x0, 0x8, 0x0, 0x54}, 0xffffffffffffffff, 0x8, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0xd1c2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:37:52 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) accept(r3, &(0x7f0000000180)=@generic, &(0x7f0000000200)=0x80) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc00e}, 0x14}}, 0x0) 22:37:52 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x201, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x6, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x1, 0x1}, 0x861a) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80ac2dac1f15e51d) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x50804, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001900)={0x0, 0x0, 0x1, [0x40, 0xb56, 0x76, 0x7f, 0x89], [0x3, 0x8, 0xae4, 0x8, 0x10, 0x1, 0x2, 0x7fff, 0x100, 0x0, 0x0, 0x80, 0x4, 0xc, 0x6, 0x2, 0xfffffffffffffc01, 0x3, 0x80, 0x5, 0x200, 0x2, 0x5, 0x2, 0xc5a5, 0x2, 0x6, 0x5, 0x1, 0x7, 0x200, 0x8000, 0x0, 0x1, 0x80000001, 0x4, 0xfffffffffffffffb, 0x6, 0x2, 0x631, 0x1, 0x1, 0x1, 0x9757, 0x400, 0xffffffffffffffe1, 0x2, 0x100, 0x2, 0x5, 0x7, 0x9, 0x0, 0x20, 0x7, 0x5, 0x1f, 0x20, 0xb5ed, 0x3f, 0x1000000000000, 0x8, 0x0, 0x1, 0x3, 0xfffffffffffffffe, 0x0, 0x7, 0xab, 0x4, 0xfffffffffffffff7, 0x9, 0x100000000, 0x80, 0x1, 0x8, 0x30d, 0x0, 0x0, 0x7fff, 0x9, 0x19e, 0x7, 0x741, 0xffffffffffffffa8, 0x2ab4, 0xfffffffffffffffb, 0x7, 0x2, 0x306c721d, 0x1, 0x400, 0x98880000000000, 0x8, 0x1f, 0x6, 0x7, 0x4, 0x7, 0x20, 0x3dc5, 0x0, 0x7, 0x800, 0x401, 0x10001, 0x5, 0x6, 0x1, 0x200, 0xeb7, 0x75, 0x7fffffff, 0x4, 0x1, 0x53, 0x2, 0xf3d9, 0x63ad, 0xd91]}) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x10, 0xe, 0x4}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000006c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9fe763baff1763"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001e00)={r5, 0x0, "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", "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"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x9, {{0xa, 0x4e24, 0x101, @private2}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x0, @loopback, 0x5}}]}, 0x110) 22:37:52 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf000}, 0x14}}, 0x0) 22:37:52 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'caif0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000007c0)={0x0, 0xfffffffffffffffd}) 22:37:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xff00}, 0x14}}, 0x0) 22:37:52 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:37:52 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f00000002c0)={'xfrm0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_setup(0x18d6, &(0x7f0000000180)={0x0, 0xc6b6, 0x8, 0x2, 0x1d4, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 3: syz_io_uring_setup(0x132, &(0x7f0000000240)={0x0, 0x200, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @multicast}, 0x10) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0xa491, 0x0, 0x81}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x1, 0x1}, 0x861a) 22:38:12 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:38:12 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xb8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x40, 0x400005, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x34000}, 0x14}}, 0x0) 22:38:12 executing program 0: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = creat(&(0x7f0000000180)='./file1\x00', 0x1) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000280)={0x7, 0x7fff, 0xe16, 0x800857, 0x80000000}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) sendfile(0xffffffffffffffff, r6, &(0x7f0000000240)=0x6, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0xd7, 0x7, 0x1f, 0xfffffffd}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/protocols\x00') syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0xc263c7fd77b7ab2d, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0x478, r3, &(0x7f00000001c0)=0x5, 0x167c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r7, 0xfffffffffffff86c, 0x3) 22:38:12 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:12 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x8, 0xa2, 0x7, 0x2}, {0x80, 0xff, 0xff, 0x2}, {0x4, 0x35, 0xf8, 0x7fff}]}) getgroups(0x1, &(0x7f0000000200)=[0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000180000008fb0068342344c726e79decc0b81e16b46d1efce295a21f767563b1610bf146d0192c5dd327bb246a15deb3e8ae1", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=r7, @ANYBLOB='./file0\x00']) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:13 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x80000}, 0x14}}, 0x0) 22:38:25 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x3, 0x8, &(0x7f0000001740)=[{&(0x7f0000000200)="c93706bbd4e970a67028734581a5e683aaf85a36b1953fb1b43588c9fab5e5952dd721be0f405cc9d8ea82a58fe045eeeeadaaf4a44bde6c6b94607de8bce3d790639a1556ad8b144221864a247155b4d7428dfb7adfe0913e4425b5031299a48902e28e400474d42bbccef5dc5dad90779702681e92a52f9cd650beb737fa1c81b108a87cd33e233c4495c466983a462c9d1db3034681ba7db35d31672fd5c1ede3bdd40f9a72934d6f63693331020192df", 0xb2, 0x3}, {&(0x7f00000002c0)="48bf557b250e34bcee483f68000f4fd2c2e08bd909c70c82920a341bd1f55d880a1dbcf950fd04e8a2a6948b17690005dab9c7d27cb4d3fd74dc66501f13ce12867d6cd92afb4fd573a98bc05c57cb2cdb407f1f51bc7a8dd970510d201d2ee13ea14867f5b40c7551b4ea536db5bba8241845717425bcf7e2c5d7d14fb5c79511ced937a5837721ee179d21deead49fe087fab89fa3b8f945d10beae126a0400eaf5b198c797271b2d13d02fd2214ddb0b29e93d01d1a85f549b47e0f", 0xbd, 0x7}, {&(0x7f0000000380)="f36d6da40278613b7bc312302e9c2df133e941bedf9c46d9a49f8137b9c05429fbbbc30d152dc47c269f1a5382a754b5", 0x30}, {&(0x7f00000003c0)="44fd3a5adb8e9852a24ca7877936f1bd1f263e236449daa6f86da3c49044bbe2e7915cc253ba14b8869a5bb3914d1cb72d3d7ec7bd58f5c4daf62451ccd047796f027bce2f9f54687ee1c6577683380cbe8c9fa6d52d27b24a0bb3d24b6c808ecaaaa078bc73d161a56673a5e7f6c706b83da4af3213a73a1b60c9c890ea12f73470d53955e33ba2b89a2a86891284fc836d9c9eb0354d08fbde059a4b86eb3e887a2d29bf9d17dd5d42516cf0ff00a5f55a8897c9b45430000010246acce983d341afd64a667aad5479664bf1a6b358f4dad906b978c8b30576e15c1b4ff61cad", 0xe1, 0xffffffffffffffff}, {&(0x7f00000004c0)="d40b7aa458f4f2f465b9e1a3be03e5c57eb093069b11a8a45cb8dd5e7937ab674e65b081151d24e6b8d26616aa8375b050dc1f1e7c9f104fc456dafab40792def28a247599ed38b525b49906e87f7a50c1e08850af0020fdaef8fc7b1a8a5df3b0b8113489a45613e195c83d9308889a81e3583678cc44dc08f15cee9583a3d8593f70c194ace88fdaf9733a9dffaa6b6c73f538f22ae3d8ad9b2cba4fcfa08b1965b16a377f9d0e9e71da130faa0d1e6c6e27fb6579d51c963caf252da22733f62dda0ef511ab9bdf465905001c362f1abcdf4561500ec6128969d56afcbb25b50c86751fb63df189", 0xe9, 0xa2a}, {&(0x7f00000006c0)="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", 0x1000, 0x9f6}, {&(0x7f00000005c0)="2bcd43115bfe52695521eae3b3bce53e15b7350e923eeb", 0x17, 0x609}, {&(0x7f00000016c0)="f2f39a487975d22cfba9cf4f6c533ea45a2f25afa368e1a3635d49205ef13f30d0cf97b6e3b5e7aac611567037024e34f25245e9fa4f476704a849595e4398e8d894809b49711c5f7dbf37f68700c71c3751b910d4d3e1a661a1c574", 0x5c, 0x3cc3}], 0x200c00, &(0x7f0000001800)=ANY=[@ANYBLOB='size=,huge=never,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',smackfshat=.!,subj_type=)&,smef=*:[D,seclabel,func=MODULE_CHECK,fsname=ip6gre0\x00,\x00\x00\x00\x00\x00\x00\x00']) ftruncate(r2, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0xf, 0x12, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) 22:38:25 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfbffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:38:25 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x400300}, 0x14}}, 0x0) 22:38:25 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xab, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x660, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x7, 0x0, 0x8, 0x7fff, 0x1}, 0xc) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f0000000000)='./file1\x00', 0x822c2, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc0c0, 0x0) io_uring_enter(r5, 0x17d1, 0xe630, 0x1, &(0x7f00000001c0)={[0x1f]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x188) lseek(r6, 0xfffffffffffff86c, 0x3) 22:38:25 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0xaa446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8080, 0x7ff, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x110, r0, 0x56bc1000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:38:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0ffff}, 0x14}}, 0x0) 22:38:25 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1800000, 0x21011, r3, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x110, r4, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000240)="0f2e752b48a8a80ca275e1c99bad150a8d2dfd253d8a2cd5e943b04d78ce3210e5166953994cbf984d86d68aef8b9b1f8d2191b099c2d6feb8ac572cf29c44d32396dee4cabf10e1299000014d092da537882e379a1edbffa91b419b08540cac108beeb41ca193227cb694d8b14035c03937eee3282a5f1454113223de31ae27e0f50922b11d29b906d83ea4a38b53b9a1bd814aa1d0a8546477c32594e99f60361ff352ac17287e7c9f18e7fcbbc27b82abb8567e5890c3f68a26a424815c016759fdbb961035af13dd6b93dbc65aef0f309674fbcae845b5adf667d84d93d3e9be551dd6175d7c1c", 0x4}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) dup(r9) lseek(r8, 0xfffffffffffff86c, 0x3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000001c0)=0x30) 22:38:25 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x1000000}, 0x14}}, 0x0) 22:38:25 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x0, 0x1d4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x68}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) 22:38:25 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x80, 0x40, 0x4, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080)) 22:38:25 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2000000}, 0x14}}, 0x0) 22:38:41 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfeffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:38:41 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) sendto$unix(r2, &(0x7f0000000180)="809a8313be0f9b3f4e439343f36008a2add4c77846f7275b39e839f0e78d15b1a9a273396fb5953ccdba9742ec1b48798ca25dd73e8180d6d276896a7c83a5d7d43b4a8dad787fd1eaf37ac79d95781fc5b70f22a0de8f8bcf8d19cfca5149ff21b2a96306e58d9d9e1247991462a6c199d660f986a12bf6fefe3bcf7a4ee698ce70fdbdacbd32960db7659efc4efa12a849a2c5c43ae0dee5", 0x99, 0x20000000, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3000000}, 0x14}}, 0x0) 22:38:41 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000240)={{r4}, 0x1, &(0x7f0000000080)=[0x3], 0x1, 0x0, [0x2, 0xffff, 0x80000001, 0x40]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r6, 0xfffffffffffff86c, 0x3) 22:38:41 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000180)={'macvlan1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) syz_io_uring_setup(0x11fa, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x8, 0x2, 0x0, 0x100, 0x7}, 0xcd52) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x4, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r6, r7+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x39, 0x0, 0x8800001) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0xf8, 0x0, 0x1, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x3, 0x8, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) openat(r0, &(0x7f0000000200)='./file0\x00', 0x2000, 0xfd) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @remote}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:38:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x4000000}, 0x14}}, 0x0) 22:38:41 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x77359400}}, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:41 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:58 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') accept(r3, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:58 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "77004a6efdff00002d1ceb7300"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETGROUP(r3, 0x400454c9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r5, 0xfffffffffffff86c, 0x3) 22:38:58 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000d5fc97c90f87213aace867ea4a113347fb89791b84cee08b946ded4ded798b1aa6b7de2e82ad01cb79098f000000000004c7c621d97f4d36a54f0715a3dc74598ec2af473c7c95f1c47f5e3ef2943249036b2f4f01355414382fad6de34f2b44e44c4c742b46b2ce1748093f37eae36e66da3103058bed3bafa56d2d78383a8d58e597970046f98a9da57bfbbaf683022fe57cff752b331685897841e7c6c3b0c7a7d45fe47cf7fff72844319faee956ced8cf76a18d9a479d3467ee41a8858c8919ff4d4724f5f58f", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x7, 0x8001}, @window={0x3, 0x1, 0x9}, @sack_perm, @window={0x3, 0x6, 0x1}, @window={0x3, 0x9}], 0x5) 22:38:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x5000000}, 0x14}}, 0x0) 22:38:58 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:58 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r4, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd_index=0x9, 0x3e9, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x14}, 0x23c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:38:58 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB='\t'], 0x24}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x8, 0x0) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) readv(r1, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/260, 0x104}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00'}) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {0x10001}, 0x2, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="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", 0x1d8, 0x0, &(0x7f0000001e00)={0x2, 0x1089, {0x1, 0xc, 0x7c, "ed6a1edabf9ddeb1eda86d05274861dd9d6c96a638105a2998a6df38ea6b89ea5e72ffc9ba521c1fea9bb7f7a8b58eda625225edc8fbff0fd1716e9a2adef02712d95f0aabf2cc4808c019f0ca3655fc0e67576cc4eae84f8f93e1771e120e4c3adc95602ff3979b623a39c287376306d74d86d4870c9e88c5092904", 0x1000, "93c43bdec8a99701253be9d178fe416d5349f618e4c220bcee08f9a48a8604373b22d77ff841f1a49e143247665790790504229c0fa86e0fcda2745778f54b2ac31eb19c70b24187b8f14f1615086ebba591c8380e2ccc4e27336a285578c0de587329b024a45b4bf75f330dacad92e49280a591014e90f8a63bd395beb6a675e0ead9c91ad95dd8ea54ee094b58f2709f986a9828d01d58f6fe9ed0907172e4deddda470504d80a8427058d61af7293c10ae4afef160fe2e37735069a894d25ae2de4c2094876b09eeee72868f3adac46ba1af69afdad8c6526cf7519f155eb2804611d92b0614f864034b6d5025f43ad466b25b13d64b3c5ad994e2eb267d4e62197c0c0a7e4edaa63d48b826f7429487b99dcdb6364952207b42eec7687d0f6305feace11f126e61c4c4aa92736a9cf6075c347c76e502c6f8ee217e9be2b580659eb8e11ee32ec9b549bbb71a0427d97f6344c28c86640326365c1267b93eae4fec367b9c8517282b7861488f848142e3fa35ca110ce558072d5aca3dbd8c2e3aea788defc7e9490a4c58079b1a403ac8c67cf7ed5559f8cf3a4d5d1d52927223fd918baf8e95bcba1318c4cb1292d22d356c3896586a5968959a0e136bb5eb8696c8b3dbb6eda40239322ba0c4b05adb17cbf5e7c4631563f6541f94f2029332438d0599b8b3e52ce3c7a4139b6c9c570f7c3cac1bb791ee714efbf6de92e0bb86bef6c8f80d3b0495145d767f6af4974bcae89a2e3fc7cd44326ad4e65515a54f9e7865630de2bc8ce1eb7addccd0497b65693fcd97676b02dc2c83a44f60a3d0b2376bb05eb8ea9c7a49e2121313053dfbf161e8dbab1a57ea05d663407b876bfdee429eea22a03dc630394cedce1fde3868875b65a6b27420d18bf346bebae38e54e46afe388c7d92c3c1de0dde47fbe50f6edc92008e71dbacba475c2b548fc1a11068e47efa309ad438d7bbaf05b4e06e5091f1dc6f3f7a94c2b0a9d56d2f7fa1fd45de6d8a4360733c5c83b044a6abb1c3662a9add6e14ac82fec36de76cc561d37679a1f608abe346aefb993cc4d08edb19189dc235faeed251894a30d75fc9cd445e27eab49c361522ff312baa882fe4f73f808b6e3da92fc1623940b7d05243a41d1e3a43c37d359941f6c50eef79413bb56aea0e2bf73a2d5e12e212966b7e3821aab2c8530210ce78b6130ee48882a81b385dcd8790b730743c8f11487a303c9f08e3c28ed1487aeafa195512242794cf55658f053ead38afe3ccbccf477ae5cd3a6b6d06a43c28f95e1aef500539e721e716adfc3eb6776e736d00ecf3f28da6575a3a38f5b0e220db9e99524e37846c0ab54642f28d7775fb9b3c208cf377ba2d54c077fa2953f38dcfa2f980aed2add58ae50dae30b88abeaacd249b79acaf24d73565bfb6d3299c245464b2c72d6f38ec4355c935e9111f86ce40801d70d5c2a0dafab6016533a67fad1ff612279db6cd84c2afa1db1e75c7f46e63d6c29b31b9cd99ee6de01c3d510cadc816b6b971148e63586f482c844a52147921f510e25eb1b23f82a6c9b5125e5f427725ca102bf1c459e0b3af344cd1f5ad708fd32fcd622afe1022250b7859f9e29870045c4d262d53b7ad909039a7cd779735877be2577a701c7a08e95f3215ff15124d283d47899a488b899d2ecd26bbc598a00c7380f7ee40d99a63b168f25eecce38b0af34400f59016db8379c7794ed11a71c488b768c3f6b3585c9c3a4a7d8591e7c9185a203fd6002ae715e07edeb9d1b3a532db8cf8c3e86d2ba8fcc93781bbd3da6b2e22007130e7e1bf605751bbbac597977179e90e18816c4773c91121f4d34f22b7fbd66ab3aa0d5ef4f0d3be08527fa3df7fefc259b632c73a621ca015d689fde6a1cdd314df3aa267e713e8058bf89b061a9f76ad169491ae0ef923a82d318499084810be0fa9c72281c96d55db4c4b837e97cefe4daeed4f1eaa4b0006e8e0b0b5acf725b65b358ac4d86a59e3e90109362fd099455af29110eb34ca0618a0e4eb4ad6a8cfb0bf5ad942736bcfff08059aa58c131ac9c0345a953e0c0fdda0b21bf1eb5062984f9e3328b7bc72c832e15987a43fb770d49c0af39ac771c9b4dba23b4ef4f0242891b1f8d959389e9a829de2ce6be1d9dc15331c51d7421e85f5c6f46eab1f3d3a783bf111e630777dfa8931227ee9d177e443cf987b6519fcc69a50606ed2352f4f42018dc3c92057a2599115a390a53cf7ffdefe9c6101d07dc28b776e43620410f2fce7926349e059e20f006cd72580ee935aeadc93502df89a783187a6837899afe5067fd33be130fa1f9b4a25097ac683a44349c2b399757d9b49b65bcdf4d38d8ad3ff1ca2c27e9793aebbfbc626110c2f44026a2cd0378f2bb298ddeb7b3924303c42eff134c3dc15b672faf595b3814b9e156e8f1b4da3a6e07f57e7e81b0c63937008e5ff50941d133c07e837edc7bb29fc81442b081dd361ae4352edac157d4b128696415cdc69dcdc8ae3458882031dacdc0d173327259b673dceac47d18ca7519f7b2d03d9d38d15e636cc5f6707d59df023bb7ef01947fd016399f03215ea0940edd1648a9004b9cb6e6f79cdc893758de17a77e12f91408aa685bad6b9afb14293dc5c758674e49aec5fcd4773b7ba6dcf78035a533fe84e9786d8404e15b0732bc1a6e1a991b3f4eef642abd0dad9cff6f2dd0664d3455784fe6a9a42ac95c96593196540f400e8220756ef2da0aa881a89634c6ba88ef59e2d0e25f535d0fa0633ebd606d8c82d6f998a3347d86a74748b3d0cedd4c61bc117167cefa17a61ba129ae571a42d2d443706c558649958e996b4fc8b43c9983c73fcc632140de6824d6237ed6da60836e4fe974948512b267a2ca7b312ab8c4a3d1ecaf66fedabe512b1d9b439b530fe0307dd0f98b62f3f2d48f4c524efad35d400881ec44765230514069559fe6ed6ffa3e4cddd5bd3f4c973a0d985f4ddf4ff2172a621cc132864175aaf9b731a66bbb8d72791f2cfc789a350e4319422d4659abf5959e832eac901347cd129b9c57bcaa8d9ca7bca70f25cf7421863e9233d38443894a3f926984b6e1c0864ea947cfd4898df0e9699e256a5ddae3862ec32fa53d7c004f469746c734dd77fb3768cc1690fd2c92028fece63088e7f4ca608497039c7aca556a4855da738fad096889bbabf38632efb3090352f27fffa2217c4919857813c1b672d48aa473e90bf4e7f2b0b347f3ab6b9dd8de9864a92846f082ed48c384360ea57425e250ca121febf6a690bdd7dc732b657b933909d191a0f6a717fa19c2f90c16508022bd7e5239cbbb11b458b912b22e867439d505c8214212fe063f11451a5dc7cb510d8237c81248f53fdd92a5c8b3df517d841c6ae8d447f79306dfcca6277defa18caee33cca294f64a0cee69b91b7b7ad38c52b6addf92e20a689bd47decfbfbe3d2599d0b00d7ad2285739d7a7b005d930a704f52b7f74a21a273f658dc19c24825c2ba7a6d0b912dd36c6dcec0b23526163a4ecd0f7ec046f4e2cedf78f5bb826d42e9b31a4a1296a29833abea30ed907ece0122dd675502c8c11495d02a2f1022027807f23242e09bc67eb498f0393cddbecd737560db2e856da190e366b2b3ba2b0ea24f073f01acce9ef644162441cdb8387bae0be36c9790611828fce661d5d520df68ce0ad88a32e48c4da8d29a684ae1eacecfbe01c8d8f36310550e4cd3355a1a5e69810b896b41f859ef28425b15414677947dfee3ecdc354076ab48d744cd8c9ddd35a9709b45bf289bcda84e9fefbbeb67dc5c6d11026f4e757ae9a98cf69a7abdedb6ff320f745672f0d9d7d17a0fb221a3c14aea8bf72a167477fac628277a48ea19e92b16473d0eade41d8a5d7ad3c7f3c4189d6da14b92dcefec9204f6a6d9f98ab6e63ec6229059a4a6ab7b2decafee0cbd3be4a2c7f394d825facc49bbbd75ec9bab18b9737f6392fc55fdcbdeb337374a0f32f2017070edb36a7f36834729fb56843c059971e5fe59c2757edc16b3e4575153fb9e7c11f4d85653f33be76f1168c820974850fce183ec9ab178bf4f47f3f2602c3794e76259b6ca0df5024ef8b881b6804c97a0a0d0433d89efeba1c46c74c284567ffbc96459d5acb08271fac516a334ee73064961f15437fd1d7fd2d8005daac82ac7a58d713baa6d06ad67ed9934ebd69213cb452ca017ca5b20decb50d8ecf10c83c9fc53539f9f051f7deba775c8ed41efb63da9536da6f3795716b48e8d25382678d35057000ec911ffb28156891dc5656841a23fe48889e362268b642bc21d742bfe44b67b049ad1737f5ab55fa325869e48744d834105de175f9104f5d335c88854b7cf6bd670e00aa3b7def2a43797872701378fb4438d1ede2564b4fb54f4524042768fc8efad567d8bfc3e2b8c0d8fc3d978305a90e938d37c5df1c177601ee4fcf48de4bb9feb0d72a7f91d70d1c42027293f6ed131d4665a1299e6fe4b5accdfe68c912eec4e920a6b079b7bc1c9819cd484b893ef098a262ecc30d5d5db1e82d0bc0608f60a05bd8daa539ac52fef6f5c0a792b077540e0fc4540e5dee600a046ff814b67aa4a0c4931db194edede3e9acb331c030369c7dcb53e988ac6fb0b35f04bdc9ce9f35b73b629f3e07418c20c4267eb267f10b5f1a5fe98af0ff4383dbaa1763fe39436ffba9eb2f74bfd7853689da75b1c5d0b52df76179c8064719cc7cb2b1fc74376d94203801ae613b131a332ca34f9a711592985812783192bf7dd68adce44051cec864554f99bfebb70633eb7fb6a91612dc431c065328a8f2234edd07c85e4ec36d171250a5d73e1c8d3401bf2e9fb4065a96a8e5d842ea05dac8798cc8859a25fab0bccfda51c425dc2a34513439fe6050984ac70991fd48f0f6b27a557d1abbd761d2db659c8b834497c5650eafd66e9c53f3afc1fe5ba7d520cc824c0f7f66149dce085af2a3d2a35ea2210d31e0d919fb1d6e3b238b4eb4a4ea517c9190dfccb2945e2ecb74f42330ecaaf75ea50063ce1f0986ee6536c79481452131945a0c7381264f53b954f0815c2540a336c22f1c6217bf49f5118f26dbd2447c3d3d4402165cdda29b8df42bb4583357cd104fe7a2af9ee366ab1406d44c9e77afe9a77efeae96826591080664c10f5cf6948aea4b980f7dfb43774fd102b7bc547c1d0e9b75faea6d813643acce8dc17e9e109073aae5e15434c9e43212695a0d9320ae101158586652f12f015b6abaebd575b00001f3de893d126b1509b90ce9b243196913b33729805eaa0556079d42f9c7fee7d4b9a55bd4518041b425d5da45f073511ff1d470ffaeb233e9d8a1a09904848273a528f11cabb64d671a3de89152c1b72a0654f0d38a3de3dafa1f047d92ca0ff21006e880c493c04d5b43278fb59d6a72088de435de6a5508a92f4158ae0ad17f964958295d0537c6c9f177c9efe0b15005a333a1c4c0f71c08e0f9f8912d8ab2bc8e55fa92a1f582f7690ef882df15a9f11b043ac192b93c4da9c6ba4990f9efadea16313b2f6a62fa42bcf23e6609b057d70331dd51c582c8886172637e88637c41f42a0df9059942b52f02be58a2120c11046e67f69781acea6fa03b88b08852fb07e4398c0bf59bcc79a449daffa9b1df958f710deadba2df2fc6055f2fbc3c6c395ccf3bb1ddb44650a000ea5f8dbbf7c1d908634f7053d9dc24eca9593962dbea4bc8184f0c7f62d79b59c1445cc5794edd46d00771a1089e49399d88b0bbf3adf1da4cb8495804caebef6595758ea"}, 0xa2, "d189a08ceed21a1c3d3b94d2c705425b956aafc9108189565e67c033c623a2bfb880f364508bada81c4fd5eec7390e1e856af2263bd99b0b6bb358bb97e3182893b7f5cecd19c7972c691e8ac886651dbcf52e7da7dd1f3c33dcab73943574f06c29744bb063114ec0ea08dc90a5ce89258b9340a0ef5c5a58489cb560617cfe855b24138e10fc57eea5108410572cc28654c3325f95cd4171f2a27471ab88c1feaa"}, 0x1137}) 22:38:58 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff0f000000000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:38:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x6000000}, 0x14}}, 0x0) 22:38:58 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:58 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x1, 0xf8, 0x20000000, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:58 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x201, 0x8000, 0x0, 0x8, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x2000050, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6163636573733d636c69656e742c6d6d61702c6163636573733d757365722c616669643d3078303030303030303030303030303031662c76657273696f6e3d3970323030302e4c2c63616368653d6e6f6e652c63616368657461673d69703667726530002c6163636573733d616e792c6f626a5f747970653d2d242c269d2328275d2c7569643c", @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=$^,.\'-]$-#&,defcontext=unconfined_u,smackfsroot=syztnl1\x00,fsname=syztnl1\x00,\x00']) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000180)={0x7, 'tunl0\x00', {0x5}}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:38:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x7000000}, 0x14}}, 0x0) 22:38:59 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f0000000240)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r9}}, 0x401) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000010000001800000062de5ad1dab7318b529095e204352570a557df1e4a", @ANYRES32=r4, @ANYBLOB='e1\x00']) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r11 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r11, 0xfffffffffffff86c, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file1', [{0x20, '\\^^&.\\.'}, {0x20, '&/\x8a'}, {0x20, '.'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '!![.],\\'}], 0xa, "781190213301d0d22b75efcb456139d5e662d361b5a1c59c935b73ca26c8792818815780b30a80a5133765b2b93d58123c52821549ed7d179ba5c418be8fc1c43720cf8bb3cb4598bfe1db74829a65c2597d5f439c3cda2f6cbe031d1bac5279960ef10375aaed31a6bd12496404a945f09d2c6c38057eae549daa5a2f516eb7442d97c05d2c20906b4ffeab525ab9ea0bda9d236c084a3a7b63d44699bea2d38cc0bbfb19a64a30d3eaeed8b6d03d9c23708a3ecc9a7bd80b87ce57c2f8a58515fc17a9b267d89f4a1accdf1c5906365d0e6993bca35eafcf6ca5dbb6163d094bc681eff13aeaa4a19dffe3"}, 0x113) [ 2618.587088] 9pnet: Insufficient options for proto=fd 22:38:59 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(r1, &(0x7f0000000180)='./file1\x00', 0x38000, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:38:59 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2618.709317] 9pnet: Insufficient options for proto=fd 22:39:16 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x700, 0x10, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:39:16 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8000000}, 0x14}}, 0x0) 22:39:16 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:39:16 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) r7 = syz_open_dev$usbmon(&(0x7f0000000180), 0x5, 0x2000) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r7) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) memfd_create(&(0x7f0000000080)='\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r4, 0xfffffffffffff86c, 0x3) 22:39:16 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000000180)=ANY=[@ANYRES64=r0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$cgroup(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x140000, &(0x7f0000000500)=ANY=[@ANYRES32]) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/244, 0xf4}], 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/200, 0xc8}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x1, 0x40000000, &(0x7f00000009c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r7, r8+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x9000000}, 0x14}}, 0x0) 22:39:16 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0xf, 0x4, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x8000, 0x7fffffff, 0x4}}) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000240)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}, @dstopts={{0x50, 0x29, 0x37, {0x2, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x3f, 0x0, [0x1f, 0x0, 0x5, 0x80]}}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xde}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x89, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1b, 0x8, [0x6, 0x78a, 0x7, 0x1, 0x5]}}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x81, 0x4, [0x0, 0x60, 0xffffffffffffffe0]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0xc335, [0x3, 0x4444, 0xff, 0x4, 0x2, 0x7fff, 0x80000001, 0x1, 0x9]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x1b0}, 0x4800) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) llistxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=""/111, 0x6f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf000000}, 0x14}}, 0x0) 22:39:16 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e23, 0xf7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="67606a0340c1b67e782667669159e4df180858658ffaba7935a45aae843ab97088b49e64f9f950e002c0213fb85ca11be011dbb424f054835cab", 0x3a}, {&(0x7f0000000240)="8954571bd7b66ec19089f62f6c72ee3ac583413d9f0c70bc27fe03739ecbf883f701966d4facc42110ebf0f45566d1c7309eac1c000ee71dae3832b22bd07b358a1a2eb1d3fe7788a405efe2f9f58bb850b105e9f8d359028c917e6148cc4d55cba0b819afa7ddabf63674dbdadb8d068571a94ebd832ac646de2ca31673b1b98205bc746d1723e536ef4d3b8521989350667ca566d72cf250beee61e473820a2ad9730d71038d8c88436efa66d671825a300a1b0de6704a6e2ef0bcfaeb5b", 0xbf}, {&(0x7f0000000480)="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", 0xff}], 0x3, &(0x7f0000000580)=[@rthdr={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0x20, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @dev={0xfe, 0x80, '\x00', 0x3d}]}}}, @hoplimit_2292={{0x14}}], 0x60}, 0x40085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(r5, 0xfffffffffffff86c, 0x3) 22:39:16 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x9854, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r6, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x34040000}, 0x14}}, 0x0) 22:39:31 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:31 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000240)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2004, @fd, 0x4, &(0x7f00000002c0)=""/141, 0x8d, 0x8, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000680)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010049ccb23588349b74bc25e4c2def557afce445cd0450000b4e0", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000200)=r6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xfffffffa, 0x40, 0x4, 0x3f, 0xde}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:31 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x29, 0x0, 0xf8, 0x7f, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) 22:39:31 executing program 6: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 22:39:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x81000000}, 0x14}}, 0x0) 22:39:31 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x701240, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x24c0, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) openat(r1, &(0x7f0000000200)='./file2\x00', 0x105080, 0x1c) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:31 executing program 0: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd, 0x6, 0x0, 0x0, 0x10, 0x0, {0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x1}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000002c0)="8ec934489e9e4e39046a26d98f9ee80b1e7dcb0efc19559ac3ea95403159393c62a0f4afcae5c6cb4f714f7f08dbee97deafe3b296c64d138c8b23be2c35be93cde538979db93466a9e2284c96e7ab109e0b3b1547afe500b030486a493ad717f2e6", 0x62, 0x40810, 0x1, {0x0, r7}}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) creat(&(0x7f0000000000)='./file1\x00', 0x0) lseek(0xffffffffffffffff, 0x5, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="e20003000000000000000400", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000000000075f5cc74039cf28f3f61a8810e2ab8d67708a53d88de3018cd2abea"]) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8800000) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000001c0)={0x0, r9, 0xac, 0x3, 0x1ff, 0x93}) 22:39:31 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) bind(r6, &(0x7f0000000180)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x861a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:31 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) 22:39:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x9effffff}, 0x14}}, 0x0) 22:39:31 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x50804, &(0x7f0000001e00)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'ip6gre0\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, 'lo\x00'}, {0x20, '$\xf2.'}, {0x20, 'lo\x00'}, {0x20, ')!:!/}$}+/'}], 0xa, "d8b487eb87b785f44f71fd650a5aa1df1b7ebabcb3973eebdc240ef5fa3337a15242e0ca8b420391ad8c517dafbd5691c4804ce461f8c7920f6ae24d7e07c6a68f055056bd8709d867c2bf4841d514712d9a3a2ec09e0e449f6b03161c27bfc9d500d3e826a8818c4254de17093f7b62d8286bd4e6790586804e3f661db1c268850ee0e5bf052a9335a23bd16771426f7a64136587681eefae1c39c79d97b4abea2352462be7384f12130660781ad2468b9eb5c99669e9989fded2bd4a85156098404eb3eb77f2308590a954d44948551d206d752167b6dce93532d44c41a38880c13c36a75b3e7ca130d2aef2"}, 0x121) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8b}, 0x1}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xf8, 0x20000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x40, 0x5, 0x2}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @multicast}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)={r8, r9+10000000}}, 0x861a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) sendmmsg$inet(r4, &(0x7f0000004bc0)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x58}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="515ed876bcc7c5fd9ddb13b2f17a3a76d1dbaf450098a93e61f3", 0x1a}, {&(0x7f0000000400)="731bd11ae0bc844a15efd9022325a9cd", 0x10}, {&(0x7f00000004c0)="7cdff2b182c78f0cb2a350be0df99dfa7cacc21957a4b04236ca972a4f82ead40d35240641cba4b61e8a21dadbfc4db1db73241884dcabe298b348f259244af7429d5847d32bc5bd8c2085537806345dbb36f6d88a0971a4c98a9faf31cf4d9a8179551ff2d5bac2c365303e50064acc5b4246410230b73f160b1044593dc7dba31fe1f4e125c1e7", 0x88}, {&(0x7f0000000440)}, {&(0x7f0000000580)="d90ec5aa5dc5013963f12e687b6347a8aca233aa55b593b80cd684710eb36c49226025fd", 0x24}, {&(0x7f00000017c0)="d05c1a73ebc70f551779671d597e4fcdc6d30788a8ba7b1b18f28d9d22dbc78c9e1ff5e8e1a2d1a301e7fc40913e34eb6d44864da1ef6d6eb05afc16d910c85b4d314c29c6a6cd99fab670174bb4b5a5d07330b19fa8b5968cf7bac67a1d38d69f67d6678637332bd49270185e4bae9a007450ad288035c280568cf925a095747ffde0f06d9c1dcda35214e84dbc89f15787d0ec84fc6703654507eb3663c74761a54742ae452c6d1724a875c7ebd709bd0e88325246c1580a29db2a855c9e70640ddb0569dd567dc3c158055c3949af528f183ab74bbee64a807f11699b22", 0xdf}, {&(0x7f00000005c0)="798d6837d9a6cb29d4aa4a1fbf4e6210d5bff5b86df6718b2911f2e5582bb2e1b7ef2f88796cd416", 0x28}, {&(0x7f0000000600)="831e50e345d63367b5bb9871884e5b5dded27a478aa3e65a996f9facf8fc9e58d1412ea8eac3a813", 0x28}, {&(0x7f0000001e00)="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", 0x1000}], 0x9, &(0x7f0000001900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x38}}, {{&(0x7f0000001940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001980)="c284f3194a60c875c3295d8f57bd222f49d29279d4331b8c06630a34c7e1869325d18b0f797cc66889d2fd67", 0x2c}], 0x1, &(0x7f0000001a80)=[@ip_retopts={{0x80, 0x0, 0x7, {[@end, @end, @generic={0x6, 0xc, "b3cfe04f6a611e6fd27a"}, @timestamp_addr={0x44, 0x34, 0xb, 0x1, 0x1, [{@empty, 0x2}, {@remote, 0x1ff}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}]}, @ssrr={0x89, 0x23, 0x24, [@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0xb, 0x1c, [@broadcast, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4e}}], 0x138}}, {{&(0x7f0000001bc0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003ec0)=[{&(0x7f0000001c00)="90dec719e9523636e2fc0af076b7e0370870af9a8792c1c152ad7e6676a91fccd99039ecf7417cf12b51ed0f8cabdbc985ef3184b3b036ab0343f98ed7ec053c2e6729", 0x43}, {&(0x7f0000001c80)="065ae3cd7b62b432b822a4265df5c488ad3c26cf9c372f6822bd023c7cf4eb445b36c17ea9ecd91ab977fa1f713bba765879e294702ba687af5abd0869c70fdab19f8ba6de8a00ffbcdc484177f809a0d8084c4c5d39f93b182d2634988a5872d80ff681ffae139ac663e9e2ca40d8db05ebc4defe5b47d36873b5352916a43dbffe4fdf6b", 0x85}, {&(0x7f0000002e00)="ec5f7d1c68043f5e8b46930a01cadf2428b877f61e6c9c221c34cf2b55cefa0a634612c0c15ecb92953f5124a64da1f0ade6612995fc6eb6e4b692048db501db27fd326ca7fa9bbf5ef8f09da15c48a37a652a22bb1062fc56ea1ee2043b89a6f2f25f52646c078447e0fb5f18ce9620d0ad549469ad4a1c3a08a96baff2e83f5dc65c5d4d4d4fc39b25f1b0ee3d8bdebac0272f66e4240b3b7c1c7639fd569f3a9c030321f837ad080ce42d58a4ca19904ce7cb5a1f17ec30", 0xb9}, {&(0x7f0000001d40)="7a0cd9a65dbbfc9bf7fe5b272f", 0xd}, {&(0x7f0000002ec0)="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", 0x1000}], 0x5}}, {{&(0x7f0000003f40)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000004100)=[{&(0x7f0000003f80)="ea6219710af08867736aa32c0d593eafde215762592c7244bed5db76e75d901fe909bd8dd30c7986925a0d547c0975ff6a0cc9297ff2dd1142fe1f25a6dbe47e728487de4bedb60442256cfa38f34cf61ce615873b84e32f2cfc97075d27a904cda81bbdb9277458ce213ae17eb5d112d827580cd6df06013b15c7e671", 0x7d}, {&(0x7f0000004000)="b3d82b767fb8b38dffe0dc4644655d405161b5cf0ce30c25720e627a69e42efcc0da9bbc3f5d39d9fa94ece439db57a74b19209451942b1c509d2b241eea5967172ca28246eac9fd5ed19d1c3b515398e7f4bc7710a7e9a655d7a31a95a3b1407a1d15907c1ce736b5dbf77f2ad42c0f807a047809e992374eb30273bf611d4e6c0c6d8939ec25323fd370f76126a5ba7e67c5693499bb79cd734859e1c360643d969960e8abe986eca98cb24ca429d334f6186037abecac98cafe01a591aa528accde24a111e2b064f4c8a8198cbc4dd81937fbd06c69e5d882de085ca07d28e9a22ca3f6743c200f", 0xe9}], 0x2, &(0x7f0000004dc0)=ANY=[@ANYBLOB="1c00000000000000000000000700000000890b83e0000001e0000001000000001100000000000000000000000100000004000000000000001400000000000000000000000100000046060000000000001c00000000012eb6614db00393bc97484941840000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, {{&(0x7f00000042c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004300)="7fbf5b13e25e3fc80d9c80f2c8865dc993ffbaf86d2cfa6758dc60d1dc71b670de0af62f96a01ab74d6f2a1b2bcbdcdd4392cb5e07c87bcb8ef7e2e468e8f138e104612730325e", 0x47}, {&(0x7f0000004380)="a07cd840ac7f32bb23c190356e926cba0ebc43a4be10f5085372ee8d26c101e7807e220ff2908c239a25034d29ef07d8157350ef23e5e376d5e9e711efa80843cb42b7fa9b82a15d7a71683efa5be19e96f893bdd0b041fa17286ebc5e336a110eb35c9b6fa1d6c993db3798931bacd2faa69757abcb78a2b309cb485915a9679bb5f998f7fbfac74f34b665c115108b03e32106c0", 0x95}, {&(0x7f0000004440)="05c2726a0aa279fa800536b704be6394b1865e4959bea2ba1ddc9fbcc9c268272b0ebc8e56d8b7a4bd05d91504ea280944b4eedeea802202450d6d088f1f282d03d72d20efced3c69a03d74e98171628d62f5bd3d931c5c026be9dc4198a625a442c94f78657efcb533ea5dbcbec4d474a0b29ca116e4dfb460e0321aae65dfcf0e2e98d0c1b5943c1afb49f20a5", 0x8e}, {&(0x7f0000004500)="4c2dc0ae499752ff92c02bcc74b41e203f29ae36470a10b4525974f5715182a2d9ccaa10b3f8eeb86f2fd650bd36ffa9e0c24ddfdda19843c59a9a649e1c915b1780556dca1d54add90132921144fb5b126d483a7be2e62339b44cc3f932e37de9a1df2ef7444206a32bfb9166aaf1efd5e289ba1dd121dd662713b39ec161019c0e0fc9cc853702753b61f04774f5bf1c42bd95cd92e992818a3d89f5e2ea4b21b4cc3af6073d42e7a31c82b5ed53decc3c7ebbb29d2ec50060fb624d7b484c10826e2fcb97192dbd1aa569759955be6d063ac682fe0bbdcb311d57713cee5f0d", 0xe1}], 0x4}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004640)="d36fee234aaca95b2c6a", 0xa}, {&(0x7f0000004680)="0bceee0e9460ea3de618f55e0ee4f465f7b9159e216a0ffeaf4a0178ed47", 0x1e}, {&(0x7f00000046c0)="c26e2a5e9c0810067f7c2707a579c53fedf51d3a4bacd676b3a9d20c2b09e849996a90b0db56827959c13a1631e04c97af55876958ab5aa6700349a4a6166eb19ed2d0e9f3c21f34de215f5f97384154f8597428d732a67008cc65fa9087373a0f85be9dc67e33c424635813dce49cbc68197124f7c3f598d98a6f586d4334dd94ea5f11ab02c61008d1f7b5d6d942a08c902ad93508029895f3166a0de2e35da2f23c809b177d7d3d879532fd94cb3da111e606205085db81", 0xb9}, {&(0x7f0000004780)="8c11a8c6171f63741f63cd0a4adc1db65ff8693d1be85d87fadfc09867fc1b9ba669fffc318fe4e874d84b54f05e490b55eab52150db5b17247f136ae9ef227ffeb2c82b91bdececba822627857a5d4bc6793ebbdf800cee77276b6a4bac101f8efd6891922b9af80537fa1ec0bfd39d1d9957e490a76db15ac2", 0x7a}, {&(0x7f0000004800)="3caac7234c398f595f09268afdff2b88bc300a52f0adc0b03093fbb567763d541e4b0d96df4252084ab3e81e48832912e199100b448025f37fb494ee84b4336d0526a5f3b98535ff2db30c8996df86f3f00ac4c53760888a6deb91a4bc47c26c1a3e3fef51bb28c4c644", 0x6a}, {&(0x7f0000004880)="3ae5157f94f69904262664451e371102c16f6c12691eec1b66ed1b0739fababe12e7dc1d19ce445997e0c98d5ac565", 0x2f}, {&(0x7f00000048c0)="c9671eda4c2d8a53d09d729a10f0c1aae389b0e7d69d703d3f1832006b29c69e32bd9ac8c60788e4e6503c567a72fb5cb6fa7291aeca49e1594ed891562f1b7be5f381971249774a79aab22946e96359c958fca167e670f29c669b891c50e3a479ed293d313ca526d29f3ccd9c98a9cc74c94a8fbc8843f2a5f780743689ad4a2d01a978834ea9702fda8e3003c56ef6b97c26f0865b1e2f472585fe94f4bf36d3e5edc419f38d1a90833090eb71fe0ef4a81b57853f51358b87970bb7e33c508a3d", 0xc2}], 0x7}}, {{&(0x7f0000004a40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000004b40)=[{&(0x7f0000004a80)="38ef1ba8439f42b17b79247ed03f36ab22e3e4b545c6e6d2c425460389d8ce068d2c31bdaf57eb714c76861278362bca289f05c82c76e093c01df4b38ece17e3fa76a8a31288579dfaf3becabafb132f7b99ce18e9a60326c8ef985c924529f6cd575ca7ff4d7c677575ffa357916101bcc3f7f52339665703a9e1907c879332d731", 0x82}], 0x1, &(0x7f0000004b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x18}}], 0x8, 0x44004) unexpected fault address 0x7f3658a19000 fatal error: fault [signal SIGBUS: bus error code=0x2 addr=0x7f3658a19000 pc=0x5cde47] goroutine 35 [running]: runtime.throw(0x991ed0, 0x5) /src/goroot/src/runtime/panic.go:1116 +0x72 fp=0xc000b06f60 sp=0xc000b06f30 pc=0x433a72 runtime.sigpanic() /src/goroot/src/runtime/signal_unix.go:692 +0x443 fp=0xc000b06f90 sp=0xc000b06f60 pc=0x44a3d3 encoding/binary.littleEndian.PutUint64(...) /src/goroot/src/encoding/binary/binary.go:91 github.com/google/syzkaller/prog.(*execContext).write(0xc000b07998, 0xfffffffffffffffe) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:248 +0x37 fp=0xc000b06fb0 sp=0xc000b06f90 pc=0x5cde47 github.com/google/syzkaller/prog.(*execContext).writeCopyin.func1(0xea8a80, 0xc002812cf0, 0xc00285ac40) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:164 +0x174 fp=0xc000b07020 sp=0xc000b06fb0 pc=0x5f2d24 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc002812cf0, 0xc00285ac40, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 fp=0xc000b071c0 sp=0xc000b07020 pc=0x5baa49 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc0055bf520, 0xc00285ac40, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc000b07360 sp=0xc000b071c0 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc0055bf540, 0xc00285ac40, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc000b07500 sp=0xc000b07360 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc0055bfcc0, 0xc00285ac40, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc000b076a0 sp=0xc000b07500 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc002813380, 0xc00285ac40, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 fp=0xc000b07840 sp=0xc000b076a0 pc=0x5baf86 github.com/google/syzkaller/prog.ForeachArg(0xc000abbf00, 0xc000b078a0) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd fp=0xc000b07890 sp=0xc000b07840 pc=0x5ba89d github.com/google/syzkaller/prog.(*execContext).writeCopyin(0xc000b07998, 0xc000abbf00) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:147 +0x53 fp=0xc000b078c0 sp=0xc000b07890 pc=0x5cd5f3 github.com/google/syzkaller/prog.(*execContext).serializeCall(0xc000b07998, 0xc000abbf00) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:88 +0x39 fp=0xc000b07930 sp=0xc000b078c0 pc=0x5cd269 github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc000aba600, 0x7f3658a11000, 0x400000, 0x400000, 0xc002ec4000, 0x9551c0, 0xc002858210) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:76 +0x17e fp=0xc000b07b40 sp=0xc000b07930 pc=0x5cd12e github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc006c3e000, 0xc0000141d8, 0xc000aba600, 0x4dc0, 0x1fac096fbb30, 0x4dc0, 0xc000b07d78, 0x5d3133, 0xc0089e5360, 0xc0096fbb30) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:255 +0x62 fp=0xc000b07c28 sp=0xc000b07b40 pc=0x85fd42 main.(*Proc).executeRaw(0xc00a1cc8c0, 0xc0000141d8, 0xc000aba600, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 fp=0xc000b07d30 sp=0xc000b07c28 pc=0x8a2df4 main.(*Proc).execute(0xc00a1cc8c0, 0xc0000141d8, 0xc000aba600, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a fp=0xc000b07e60 sp=0xc000b07d30 pc=0x8a270a main.(*Proc).smashInput(0xc00a1cc8c0, 0xc0049d42c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 fp=0xc000b07f08 sp=0xc000b07e60 pc=0x8a22f8 main.(*Proc).loop(0xc00a1cc8c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 fp=0xc000b07fd8 sp=0xc000b07f08 pc=0x8a1267 runtime.goexit() /src/goroot/src/runtime/asm_amd64.s:1373 +0x1 fp=0xc000b07fe0 sp=0xc000b07fd8 pc=0x4643c1 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc00009b040) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:364 +0x13a main.main() /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:292 +0x15fa goroutine 10 [chan receive, 43 minutes]: main.main.func1(0xc00008a0c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:164 +0x34 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:162 +0x563 goroutine 27 [syscall, 43 minutes]: os/signal.signal_recv(0x0) /src/goroot/src/runtime/sigqueue.go:147 +0x9c os/signal.loop() /src/goroot/src/os/signal/signal_unix.go:23 +0x22 created by os/signal.Notify.func1 /src/goroot/src/os/signal/signal.go:127 +0x44 goroutine 9 [chan receive, 43 minutes]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc00008a0c0) /src/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:79 +0xb6 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /src/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:76 +0x3f goroutine 30 [IO wait]: internal/poll.runtime_pollWait(0x7f365ec342c0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00722f7b8, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00722f7a0, 0xc006f35810, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fa638, 0xc006f35810, 0xc, 0xc, 0xc00049d380, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0028fa638, 0xc006f35810, 0xc, 0xc, 0xc, 0x0, 0x7f365c611e60, 0x3ff1a0) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc004d44ee0, 0xc00a5d88e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc006f357c0, 0xc006f357a8, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0001f4360, 0xc00a5d88e0, 0xc0039beb80, 0x10, 0x10, 0x203001, 0x203001, 0x203001, 0x10, 0x10) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc00a5a87c0, 0xc00a5d88e0, 0xc0039beb80, 0x4, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc00a5a87c0, 0xc00a5d88e0, 0xc0039beb80, 0x0, 0x4, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).triageInput.func1(0xc0039beb80, 0x7, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:148 +0x90 github.com/google/syzkaller/prog.Minimize.func1(0xc0039beb80, 0x7, 0xea89c0) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:18 +0x74 github.com/google/syzkaller/prog.minimizeInt(0xc006570cc0, 0xea89c0, 0xc0086f2f90, 0xc007b9d8c0, 0x12, 0x1687300) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:227 +0xe8 github.com/google/syzkaller/prog.(*IntType).minimize(0x1687300, 0xc006570cc0, 0xea89c0, 0xc0086f2f90, 0xc007b9d8c0, 0x12, 0x12) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:195 +0x53 github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc006570cc0, 0xea89c0, 0xc0086f2f90, 0x9a91b7, 0xb, 0xc007b9d8c0, 0x12, 0x5f6800) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:113 +0x18e github.com/google/syzkaller/prog.(*StructType).minimize(0x1444da0, 0xc006570cc0, 0xea8a40, 0xc007ec5620, 0xc0086f3416, 0x6, 0x6) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:138 +0xd7 github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc006570cc0, 0xea8a40, 0xc007ec5620, 0x0, 0x0, 0xc0086f3416, 0x6, 0xc00049db40) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:113 +0x18e github.com/google/syzkaller/prog.(*PtrType).minimize(0x12e7440, 0xc006570cc0, 0xea8a80, 0xc002641a40, 0xc0086f2e58, 0x5, 0x5) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:165 +0x118 github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc006570cc0, 0xea8a80, 0xc002641a40, 0x990134, 0x4, 0xc0086f2e58, 0x5, 0x203001) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:113 +0x18e github.com/google/syzkaller/prog.Minimize(0xc001551480, 0x7, 0x600, 0xc0085ce0e0, 0x7f365b61fd54, 0x69b) /src/gopath/src/github.com/google/syzkaller/prog/minimization.go:45 +0x217 main.(*Proc).triageInput(0xc00a5a87c0, 0xc004e66ea0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:145 +0x9dc main.(*Proc).loop(0xc00a5a87c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:74 +0x190 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 13 [IO wait]: internal/poll.runtime_pollWait(0x7f365ec34480, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0005e4118, 0x72, 0x1000, 0x1000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0005e4100, 0xc00035a000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b net.(*netFD).Read(0xc0005e4100, 0xc00035a000, 0x1000, 0x1000, 0xc000030380, 0x7f3685aa6108, 0x0) /src/goroot/src/net/fd_unix.go:202 +0x4f net.(*conn).Read(0xc00000f518, 0xc00035a000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /src/goroot/src/net/net.go:184 +0x8e bufio.(*Reader).fill(0xc0000530e0) /src/goroot/src/bufio/bufio.go:100 +0x103 bufio.(*Reader).ReadByte(0xc0000530e0, 0xc0001fa798, 0x4f5dffa50731e201, 0x4f00000000000000) /src/goroot/src/bufio/bufio.go:252 +0x39 compress/flate.(*decompressor).moreBits(0xc0001da000, 0xc005cb2b40, 0x199) /src/goroot/src/compress/flate/inflate.go:696 +0x37 compress/flate.(*decompressor).nextBlock(0xc0001da000) /src/goroot/src/compress/flate/inflate.go:303 +0x36 compress/flate.(*decompressor).Read(0xc0001da000, 0xc0001f3000, 0x1000, 0x1000, 0x86b71b, 0xc0005e4180, 0xc000085b40) /src/goroot/src/compress/flate/inflate.go:347 +0x77 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0002f1b60, 0xc0001f3000, 0x1000, 0x1000, 0x199, 0x872857, 0x2) /src/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:136 +0x51 bufio.(*Reader).Read(0xc000053140, 0xc000015100, 0x1, 0x9, 0xc0000b2a50, 0xc005cb2b40, 0x87d03f) /src/goroot/src/bufio/bufio.go:226 +0x24f io.ReadAtLeast(0xe9e820, 0xc000053140, 0xc000015100, 0x1, 0x9, 0x1, 0x1, 0x0, 0xeb09c0) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 encoding/gob.decodeUintReader(0xe9e820, 0xc000053140, 0xc000015100, 0x9, 0x9, 0xc000000180, 0x4, 0xc00c7d5d90, 0x4056dc) /src/goroot/src/encoding/gob/decode.go:120 +0x6f encoding/gob.(*Decoder).recvMessage(0xc0005e4180, 0xc000000180) /src/goroot/src/encoding/gob/decoder.go:81 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc0005e4180, 0xc003c18400, 0xc00c7d5e70) /src/goroot/src/encoding/gob/decoder.go:143 +0x10c encoding/gob.(*Decoder).DecodeValue(0xc0005e4180, 0x8d98c0, 0xc0002021b0, 0x16, 0x0, 0x0) /src/goroot/src/encoding/gob/decoder.go:211 +0xdb encoding/gob.(*Decoder).Decode(0xc0005e4180, 0x8d98c0, 0xc0002021b0, 0x0, 0x0) /src/goroot/src/encoding/gob/decoder.go:188 +0x16d net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0002f1c50, 0xc0002021b0, 0xc005cb2b40, 0x0) /src/goroot/src/net/rpc/client.go:228 +0x45 net/rpc.(*Client).input(0xc000053200) /src/goroot/src/net/rpc/client.go:109 +0xa5 created by net/rpc.NewClientWithCodec /src/goroot/src/net/rpc/client.go:206 +0x89 goroutine 16 [IO wait, 23 minutes]: internal/poll.runtime_pollWait(0x7f365ec34100, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00390b398, 0x72, 0x1ff01, 0x1ff9a, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00390b380, 0xc015458066, 0x1ff9a, 0x1ff9a, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000af728, 0xc015458066, 0x1ff9a, 0x1ff9a, 0xb, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000af728, 0xc00006d8f0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 29 [IO wait]: internal/poll.runtime_pollWait(0x7f365ec33f40, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00390b458, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00390b440, 0xc005e66780, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000af748, 0xc005e66780, 0xc, 0xc, 0xc0006a5958, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0000af748, 0xc005e66780, 0xc, 0xc, 0xc, 0x0, 0x7f365da13a98, 0x3fd568) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc00006d8f0, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc005e66710, 0xc005e66698, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0001f41b0, 0xc0000141d8, 0xc006ceed80, 0xc000084000, 0xc, 0xc0053801a0, 0xc0006a5d78, 0x5d2fb6, 0xc008f32360, 0x3c) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc00a5a8580, 0xc0000141d8, 0xc006ceed80, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc00a5a8580, 0xc0000141d8, 0xc006ceed80, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).smashInput(0xc00a5a8580, 0xc003a7aad0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 main.(*Proc).loop(0xc00a5a8580) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 31 [IO wait, 12 minutes]: internal/poll.runtime_pollWait(0x7f365ec343a0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00722f6f8, 0x72, 0x1ff01, 0x1ff5b, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00722f6e0, 0xc0154780a5, 0x1ff5b, 0x1ff5b, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fa628, 0xc0154780a5, 0x1ff5b, 0x1ff5b, 0xc, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0028fa628, 0xc004d44ee0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 33 [IO wait]: internal/poll.runtime_pollWait(0x7f365ec34560, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0007424f8, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0007424e0, 0xc001520000, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fa960, 0xc001520000, 0xc, 0xc, 0xc00019ab88, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0028fa960, 0xc001520000, 0xc, 0xc, 0xc, 0x0, 0x7f365b211388, 0x3ffc78) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc004d453b0, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc006f35f38, 0xc006f35f30, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc00029de60, 0xc0000141d8, 0xc00b479240, 0xc00019ae00, 0x2, 0x2, 0xc005cb2f60, 0x0, 0x1, 0x2) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc00a1cc800, 0xc0000141d8, 0xc00b479240, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc00a1cc800, 0xc0000141d8, 0xc00b479240, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc00b479240) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc002815ae0, 0xc003ec3440, 0xc00019bdd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc003ec3440, 0xea89c0, 0xc002815ae0, 0xc00019bdd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc002815ae0, 0xc00b479300) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc002815ae0, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc008884360, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc00c0c8fc0, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc008884320, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc00c0c8f90, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc008884300, 0xc00b479300, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc00c0c8f30, 0xc00b479300, 0xc00049ddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.ForeachArg(0xc00b4792c0, 0xc00019bdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc00a239100, 0x1, 0xc003ec3440, 0xc00049de30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc00a1cc800, 0xc00a239100, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc00a1cc800, 0xc004407490) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc00a1cc800) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 34 [IO wait]: internal/poll.runtime_pollWait(0x7f365ec33840, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc008709518, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc008709500, 0xc006f34940, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000aff50, 0xc006f34940, 0xc, 0xc, 0xc0006a9958, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0000aff50, 0xc006f34940, 0xc, 0xc, 0xc, 0x0, 0x7f3659e12f98, 0x3fe068) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc00006dce0, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc009325400, 0xc0093253c8, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc00029def0, 0xc0000141d8, 0xc001526580, 0x0, 0x0, 0x0, 0xc0006a9c87, 0x0, 0x0, 0x0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc00a1cc880, 0xc0000141d8, 0xc001526580, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc00a1cc880, 0xc0000141d8, 0xc001526580, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).smashInput(0xc00a1cc880, 0xc002102a90) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 main.(*Proc).loop(0xc00a1cc880) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 50 [IO wait, 10 minutes]: internal/poll.runtime_pollWait(0x7f365ec33e60, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc000742438, 0x72, 0x1ff01, 0x1ff61, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc000742420, 0xc01549809f, 0x1ff61, 0x1ff61, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fa920, 0xc01549809f, 0x1ff61, 0x1ff61, 0x35, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0028fa920, 0xc004d453b0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 36 [runnable]: syscall.Syscall(0x0, 0x35, 0xc004a2ee30, 0xc, 0xc, 0xc, 0x0) /src/goroot/src/syscall/asm_linux_amd64.s:18 +0x5 syscall.read(0x35, 0xc004a2ee30, 0xc, 0xc, 0x0, 0xe9f9a0, 0x12149d8) /src/goroot/src/syscall/zsyscall_linux_amd64.go:686 +0x5a syscall.Read(...) /src/goroot/src/syscall/syscall_unix.go:189 internal/poll.(*FD).Read(0xc00582b380, 0xc004a2ee30, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:165 +0x133 os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc005c48dc0, 0xc004a2ee30, 0xc, 0xc, 0xc0004a3958, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc005c48dc0, 0xc004a2ee30, 0xc, 0xc, 0xc, 0x0, 0x7f36576135f8, 0x3fda08) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc00006dea0, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc006f34518, 0xc006f34510, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc006c3e090, 0xc0000141d8, 0xc001531240, 0x18, 0xc007e56af0, 0x18, 0x60, 0x3, 0xc0085cf940, 0xc000013140) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc00a1cca00, 0xc0000141d8, 0xc001531240, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc00a1cca00, 0xc0000141d8, 0xc001531240, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).smashInput(0xc00a1cca00, 0xc005425f70) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 main.(*Proc).loop(0xc00a1cca00) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 37 [IO wait, 14 minutes]: internal/poll.runtime_pollWait(0x7f365ec33a00, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc008709458, 0x72, 0x1ff01, 0x1ffcb, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc008709440, 0xc0154d8035, 0x1ffcb, 0x1ffcb, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000aff18, 0xc0154d8035, 0x1ffcb, 0x1ffcb, 0x35, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000aff18, 0xc00006dce0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 52 [IO wait, 16 minutes]: internal/poll.runtime_pollWait(0x7f365ec34640, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc000743a58, 0x72, 0x1ff01, 0x1ffcc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc000743a40, 0xc0154b8034, 0x1ffcc, 0x1ffcc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fb6c8, 0xc0154b8034, 0x1ffcc, 0x1ffcc, 0x34, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0028fb6c8, 0xc004d45490) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 38 [IO wait]: internal/poll.runtime_pollWait(0x7f365e51b3c0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc002820918, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc002820900, 0xc004a2edf0, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fbce8, 0xc004a2edf0, 0xc, 0xc, 0xc00019f548, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0028fbce8, 0xc004a2edf0, 0xc, 0xc, 0xc, 0x0, 0x7f36562126c8, 0x3fe938) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc004d45570, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc004a2ec78, 0xc004a2ec70, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc006c3e120, 0xc0000141d8, 0xc00bce4dc0, 0x7f3685aa6108, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00019f890) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc0074148c0, 0xc0000141d8, 0xc00bce4dc0, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc0074148c0, 0xc0000141d8, 0xc00bce4dc0, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc00bce4dc0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc00bce1200, 0xc00c054300, 0xc00019fdd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc00c054300, 0xea89c0, 0xc00bce1200, 0xc0003e9dd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc00bce1200, 0xc00bce52c0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc00bce1200, 0xc00bce52c0, 0xc00019fdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.ForeachArg(0xc00bce5180, 0xc00019fdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc007dca880, 0x9, 0xc00c054300, 0xc00748de30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc0074148c0, 0xc007dca880, 0x9) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc0074148c0, 0xc0040c09a0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc0074148c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 54 [IO wait, 42 minutes]: internal/poll.runtime_pollWait(0x7f365e51b9e0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc002820858, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc002820840, 0xc0154f8000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0028fbcd0, 0xc0154f8000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0028fbcd0, 0xc004d45570) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 56 [IO wait]: internal/poll.runtime_pollWait(0x7f365e51b660, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00561a6d8, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00561a6c0, 0xc006f34920, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0008c5498, 0xc006f34920, 0xc, 0xc, 0xc000497958, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0008c5498, 0xc006f34920, 0xc, 0xc, 0xc, 0x0, 0x7f3654e12b30, 0x3fe4d0) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc004d456c0, 0xc0000141d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0093cfe58, 0xc0093cfe50, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0001f4ab0, 0xc0000141d8, 0xc0026e6b00, 0x0, 0x0, 0x0, 0xc000497c87, 0x0, 0x0, 0x0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc0085d1c00, 0xc0000141d8, 0xc0026e6b00, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc0085d1c00, 0xc0000141d8, 0xc0026e6b00, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).smashInput(0xc0085d1c00, 0xc0021037e0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 main.(*Proc).loop(0xc0085d1c00) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 57 [IO wait, 18 minutes]: internal/poll.runtime_pollWait(0x7f365e51b2e0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00561a618, 0x72, 0x1ff01, 0x1ffcb, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00561a600, 0xc015518035, 0x1ffcb, 0x1ffcb, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0008c5488, 0xc015518035, 0x1ffcb, 0x1ffcb, 0x35, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0008c5488, 0xc004d456c0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3198 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc00006dea0, 0xc005c50120, 0xc005c50060) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 40 [IO wait, 14 minutes]: internal/poll.runtime_pollWait(0x7f365ec34020, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc00582b2d8, 0x72, 0x1ff01, 0x1ffcb, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00582b2c0, 0xc0155c8035, 0x1ffcb, 0x1ffcb, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc005c48db0, 0xc0155c8035, 0x1ffcb, 0x1ffcb, 0x35, 0x0, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc005c48db0, 0xc00006dea0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3202 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc004d453b0, 0xc008251da0, 0xc008251ce0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3184 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc00006dce0, 0xc008251b60, 0xc008251b00) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3201 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc004d44ee0, 0xc008251c80, 0xc008251c20) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3182 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc00006d8f0, 0xc008251980, 0xc008251920) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3197 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc004d45570, 0xc004cc3f80, 0xc004cc3f20) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3183 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc004d456c0, 0xc008251aa0, 0xc008251a40) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 VM DIAGNOSIS: 22:39:32 Registers: info registers vcpu 0 RAX=ffffffff8616419c RBX=ffffffff8686a668 RCX=ffffffff81264eca RDX=ffffffff86232bc0 RSI=0000000000000002 RDI=000000000000032d RBP=dffffc0000000000 RSP=ffff8880415c7bb8 R8 =0000000000000001 R9 =0000000000005f20 R10=0000000000000000 R11=0000000000000001 R12=00000000000005b4 R13=0000000000005f1e R14=ffffffff861641a0 R15=ffffffff86232bc0 RIP=ffffffff81264d5e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005640a2e6f048 CR3=0000000047914000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000010602 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffff00000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=00003134333332363630313d44455a49 XMM06=333d4d554e514553006b6e696c3d4550 XMM07=4d4554535953425553003030323a3469 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81302e5c RBX=ffffffff81302c70 RCX=ffff88801e3d7860 RDX=1ffff11003c7af03 RSI=ffffffff81302e5c RDI=ffff88801e3d7888 RBP=ffff88801e3d7858 RSP=ffff88801e3d77c0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11003c7aedd R12=ffff88801e3d7888 R13=0000000000000000 R14=ffff88800fcb8000 R15=ffff888019487f00 RIP=ffffffff84203dac RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc371f74900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc371f34008 CR3=0000000016d68000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469 XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000