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"}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "a4b5d66e"}, 0x3, 0x2, @offset=0xa36}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:19 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100000000c0040, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00003b6ff8)='./file0\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 19:59:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:19 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000000c0)='./file2\x00') utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:19 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x190, 0x0, 0x190, 0x0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1\x00', {0x24, 0xde030000, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x8001, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x0, 0x0, 0x1}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 19:59:19 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100000000c0040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x0, 0x0) fcntl$getflags(r1, 0x0) [ 328.934433][ T9904] xt_CT: No such helper "snmp" 19:59:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000003200090300000000000000000000000014000100100001000b000100706f6c69636500000c00020001000000010000000900a47d221d02b056bd317a16e819f326deb08f092311e9c98af07a829c2acd6dd810e7a784dabd192471bc7ae521d8b3392b2343487e8dd7143b18fcb287f98f4aad1396c1d73c402f2581f693fb3e94e66009eb58215c83c987ab4e70748f32e4cc1fc662f1b8626b3fb27d904781d3d7d7db082b91b3bda21a33607c5da38cbe8d2705fa5f1ef8e40d588d1353b615482cd9dd30d0ae46ecf7342ae827194b6395924039f0ef7714074938c8d38c1049cc47e79b642c51777711244ff98461d03bdc2b361205c2ea4f59f269111ec8ad58ceefa2a59f40c2ce459b1bad9d9803a20ba3ee392bfa6f1297caf8c2dbdc02334c3ae43af5b52771d22984285558a5285f5d7853ebd887213c087869bfa313f83772e491a4481fcc3ec2658f5df3d3feb5ee112c7f9c4faf7a3820d795d20f38875182a724c898971a1066b367cac9669b060a45853479dfa578f91b9b6d3a76397e3d8557da8180edbbf901dcbe6641dce4e6e46574964dfd603ad7feaab403db209e7f0ec8357394bf0acf370dabc77a7dfb44797ad59299567d5a2ae1f03fd0f129"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x41f809b1a7d7b00, 0x0) 19:59:19 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000012c0)={{0x0, 0x0, 0x80, {0x10000}}, "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", "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"}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "a4b5d66e"}, 0x3, 0x2, @offset=0xa36}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:19 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100000000c0040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x0, 0x0) fcntl$getflags(r1, 0x0) 19:59:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r3, r2, &(0x7f00000000c0)=0x3, 0x100000001) [ 329.897169][ T0] NOHZ: local_softirq_pending 08 19:59:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:22 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) 19:59:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100000000c0040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x0, 0x0) fcntl$getflags(r1, 0x0) 19:59:22 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000012c0)={{0x0, 0x0, 0x80, {0x10000}}, "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", "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"}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "a4b5d66e"}, 0x3, 0x2, @offset=0xa36}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:22 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(0x0, &(0x7f00000000c0)='./file2\x00') utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0x5}) 19:59:22 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000012c0)={{0x0, 0x0, 0x80, {0x10000}}, "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", "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"}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0x5}) 19:59:22 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:22 executing program 5: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) 19:59:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 332.747667][ T27] audit: type=1804 audit(1581105563.112:64): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115613940/syzkaller.IomkX0/97/bus" dev="sda1" ino=17014 res=1 [ 333.533077][ T27] audit: type=1804 audit(1581105563.892:65): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir115613940/syzkaller.IomkX0/97/bus" dev="sda1" ino=17014 res=1 [ 333.565854][ T27] audit: type=1804 audit(1581105563.892:66): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir115613940/syzkaller.IomkX0/97/bus" dev="sda1" ino=17014 res=1 19:59:25 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:25 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(0x0, &(0x7f00000000c0)='./file2\x00') utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:25 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x29, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 19:59:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:25 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:25 executing program 3: 19:59:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:25 executing program 3: 19:59:25 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:26 executing program 3: 19:59:26 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:26 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(0x0, &(0x7f00000000c0)='./file2\x00') utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:28 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:28 executing program 3: 19:59:28 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:28 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', 0x0) utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:28 executing program 3: 19:59:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:28 executing program 3: 19:59:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:28 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', 0x0) utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:28 executing program 3: 19:59:29 executing program 3: 19:59:29 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:29 executing program 3: 19:59:29 executing program 3: 19:59:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:29 executing program 3: 19:59:29 executing program 3: 19:59:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:32 executing program 3: 19:59:32 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', 0x0) utimes(&(0x7f0000000040)='./file2\x00', 0x0) 19:59:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:32 executing program 3: 19:59:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:32 executing program 3: 19:59:32 executing program 3: 19:59:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:32 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000000c0)='./file2\x00') utimes(0x0, 0x0) 19:59:32 executing program 3: 19:59:32 executing program 3: 19:59:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:35 executing program 3: 19:59:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:35 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000000c0)='./file2\x00') utimes(0x0, 0x0) 19:59:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:35 executing program 3: 19:59:35 executing program 3: 19:59:35 executing program 3: 19:59:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:35 executing program 3: 19:59:35 executing program 3: 19:59:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:38 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000000c0)='./file2\x00') utimes(0x0, 0x0) 19:59:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:38 executing program 3: 19:59:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:38 executing program 4: 19:59:38 executing program 3: 19:59:38 executing program 3: 19:59:38 executing program 4: 19:59:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:38 executing program 4: 19:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) inotify_init1(0x0) tkill(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5437, 0x0) 19:59:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:41 executing program 4: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) getpid() socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) io_setup(0x79d1, &(0x7f0000000340)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x0) 19:59:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xe00) 19:59:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 19:59:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:42 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20008088) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) [ 351.820555][ T27] audit: type=1804 audit(1581105582.182:67): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir080997541/syzkaller.9xgh3q/118/bus" dev="sda1" ino=16577 res=1 [ 352.326263][ T27] audit: type=1804 audit(1581105582.692:68): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir080997541/syzkaller.9xgh3q/118/bus" dev="sda1" ino=16577 res=1 [ 352.350871][ T27] audit: type=1804 audit(1581105582.712:69): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir080997541/syzkaller.9xgh3q/118/bus" dev="sda1" ino=16577 res=1 19:59:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 19:59:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:44 executing program 4: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) getpid() socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) io_setup(0x79d1, &(0x7f0000000340)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x0) 19:59:44 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendto$inet6(r1, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c58984b16a9995bdcb80e26544d5cee2a59aa790bc0696a0b92d4bf163fe3e5c32ea10b8cd2a045ba501fef9f93ab853fe0f9580511e3f25b488d4e36a14a", 0xb4, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x4, @remote, 0x8016}, 0x1c) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000300)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 354.375232][ T27] audit: type=1800 audit(1581105584.732:70): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17103 res=0 [ 354.422570][ T27] audit: type=1800 audit(1581105584.762:71): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17103 res=0 19:59:47 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendto$inet6(r1, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c58984b16a9995bdcb80e26544d5cee2a59aa790bc0696a0b92d4bf163fe3e5c32ea10b8cd2a045ba501fef9f93ab853fe0f9580511e3f25b488d4e36a14a", 0xb4, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x4, @remote, 0x8016}, 0x1c) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000300)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) 19:59:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:47 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:47 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendto$inet6(r1, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c58984b16a9995bdcb80e26544d5cee2a59aa790bc0696a0b92d4bf163fe3e5c32ea10b8cd2a045ba501fef9f93ab853fe0f9580511e3f25b488d4e36a14a", 0xb4, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x4, @remote, 0x8016}, 0x1c) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000300)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) 19:59:47 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 356.962061][T10326] ptrace attach of "/root/syz-executor.1"[10325] was attempted by "/root/syz-executor.1"[10326] 19:59:47 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 357.037270][T10339] ptrace attach of "/root/syz-executor.1"[10338] was attempted by "/root/syz-executor.1"[10339] 19:59:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 357.251451][T10347] ptrace attach of "/root/syz-executor.1"[10346] was attempted by "/root/syz-executor.1"[10347] 19:59:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a9}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) creat(&(0x7f0000000000)='./bus\x00', 0x0) 19:59:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:50 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 19:59:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:50 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf9a9, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendto$inet6(r2, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c5898", 0x78, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x0, @remote}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x100, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$VT_ACTIVATE(r4, 0x5606, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="9fbcf1ab76c456f9fff11536eed16199529a38f82b5b250e5b0a0f141e4f6c3775cae300008ebdfe7148dee5b2130d9984067748ed5d4ed29b889bf07eb115a4e1b97348f9fed6d8af39d3fd8f000dd435728b374a7a19b752105d360500d75a0db808e94abe46df663c96afe3da582f653329b121b938fa25ce517470a5b7d20ee16805d81c075d1ed3abfe9080c204d1170709b0a88887ec4644"], 0x3}}, 0x20004000) 19:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:53 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf9a9, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendto$inet6(r2, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c5898", 0x78, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x0, @remote}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x100, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$VT_ACTIVATE(r4, 0x5606, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="9fbcf1ab76c456f9fff11536eed16199529a38f82b5b250e5b0a0f141e4f6c3775cae300008ebdfe7148dee5b2130d9984067748ed5d4ed29b889bf07eb115a4e1b97348f9fed6d8af39d3fd8f000dd435728b374a7a19b752105d360500d75a0db808e94abe46df663c96afe3da582f653329b121b938fa25ce517470a5b7d20ee16805d81c075d1ed3abfe9080c204d1170709b0a88887ec4644"], 0x3}}, 0x20004000) 19:59:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:53 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf9a9, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendto$inet6(r2, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c5898", 0x78, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x0, @remote}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x100, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$VT_ACTIVATE(r4, 0x5606, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="9fbcf1ab76c456f9fff11536eed16199529a38f82b5b250e5b0a0f141e4f6c3775cae300008ebdfe7148dee5b2130d9984067748ed5d4ed29b889bf07eb115a4e1b97348f9fed6d8af39d3fd8f000dd435728b374a7a19b752105d360500d75a0db808e94abe46df663c96afe3da582f653329b121b938fa25ce517470a5b7d20ee16805d81c075d1ed3abfe9080c204d1170709b0a88887ec4644"], 0x3}}, 0x20004000) 19:59:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 363.415815][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.421778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 363.427654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.433411][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:59:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:54 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf9a9, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendto$inet6(r2, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c5898", 0x78, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x0, @remote}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x100, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$VT_ACTIVATE(r4, 0x5606, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="9fbcf1ab76c456f9fff11536eed16199529a38f82b5b250e5b0a0f141e4f6c3775cae300008ebdfe7148dee5b2130d9984067748ed5d4ed29b889bf07eb115a4e1b97348f9fed6d8af39d3fd8f000dd435728b374a7a19b752105d360500d75a0db808e94abe46df663c96afe3da582f653329b121b938fa25ce517470a5b7d20ee16805d81c075d1ed3abfe9080c204d1170709b0a88887ec4644"], 0x3}}, 0x20004000) 19:59:54 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf9a9, 0x100000000}, 0xc8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendto$inet6(r2, &(0x7f0000000340)="5e5b42717caec8a643a74d8b805f60e3ad4d55b764dcc9183c459d8a95820ef2f803c147695c57e8411f7093b9c71ae3e690e787ed21b55ef7ec0d37edfb5d2d23ff91d485565b7f9a8ffdc899a51592b237ff22a1e303c6a544cad191a69658aa0fa811165abfbcaba1375c124f47a1fc2a23a2721c5898", 0x78, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x0, @remote}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x100, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x40) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$VT_ACTIVATE(r4, 0x5606, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="9fbcf1ab76c456f9fff11536eed16199529a38f82b5b250e5b0a0f141e4f6c3775cae300008ebdfe7148dee5b2130d9984067748ed5d4ed29b889bf07eb115a4e1b97348f9fed6d8af39d3fd8f000dd435728b374a7a19b752105d360500d75a0db808e94abe46df663c96afe3da582f653329b121b938fa25ce517470a5b7d20ee16805d81c075d1ed3abfe9080c204d1170709b0a88887ec4644"], 0x3}}, 0x20004000) 19:59:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000019200)=""/102388, 0x18ff4}], 0x1) 19:59:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:56 executing program 4: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1fcc, 0x200401) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x7ff, 0x8, 0x0, 0x6, 0xeae], &(0x7f0000000300)=[0x8, 0xffff, 0x8, 0xd0c, 0x8]}) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) shutdown(r7, 0x0) socket(0x11, 0x800000003, 0x0) 19:59:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c42", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 19:59:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 19:59:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:59:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1fcc, 0x200401) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x7ff, 0x8, 0x0, 0x6, 0xeae], &(0x7f0000000300)=[0x8, 0xffff, 0x8, 0xd0c, 0x8]}) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) shutdown(r7, 0x0) socket(0x11, 0x800000003, 0x0) 19:59:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 19:59:59 executing program 3: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1fcc, 0x200401) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x101080, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x7ff, 0x8, 0x0, 0x6, 0xeae], &(0x7f0000000300)=[0x8, 0xffff, 0x8, 0xd0c, 0x8]}) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) shutdown(r7, 0x0) socket(0x11, 0x800000003, 0x0) 20:00:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:00:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:00:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:00:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 20:00:00 executing program 4: io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)}]) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x57}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x26) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:00 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_aout(r0, &(0x7f00000018c0)=ANY=[@ANYPTR64, @ANYBLOB="503390dcd9e60166e6f310e4"], 0x14) [ 370.416088][T10567] ptrace attach of "/root/syz-executor.4"[10565] was attempted by "/root/syz-executor.4"[10567] 20:00:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="ce", 0xa}]) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:00:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 20:00:02 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x190, 0x0, 0x190, 0x0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1\x00', {0x24, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 20:00:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 372.350372][T10582] xt_hashlimit: overflow, rate too high: 0 [ 372.398549][T10590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.406415][T10590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.546032][T10590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:03 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4a00000054397b2c4f6d1f957caa9b907a3f6ef0c514dcc14f25a2d7b395c7876524d88681ab7afd"], 0x28) 20:00:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 20:00:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b", 0x26, 0x0, 0x0, 0x0) 20:00:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xf, 0x4, 0x2, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) 20:00:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b", 0x26, 0x0, 0x0, 0x0) 20:00:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xf, 0x4, 0x2, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) 20:00:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b", 0x26, 0x0, 0x0, 0x0) 20:00:05 executing program 3: 20:00:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:06 executing program 3: 20:00:06 executing program 4: 20:00:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6", 0x39, 0x0, 0x0, 0x0) 20:00:06 executing program 3: 20:00:06 executing program 4: 20:00:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6", 0x39, 0x0, 0x0, 0x0) 20:00:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:08 executing program 3: 20:00:08 executing program 4: 20:00:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6", 0x39, 0x0, 0x0, 0x0) 20:00:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:09 executing program 4: 20:00:09 executing program 3: 20:00:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c", 0x43, 0x0, 0x0, 0x0) 20:00:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:09 executing program 3: 20:00:09 executing program 4: 20:00:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c", 0x43, 0x0, 0x0, 0x0) 20:00:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:11 executing program 4: 20:00:11 executing program 3: 20:00:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:12 executing program 3: 20:00:12 executing program 4: 20:00:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c", 0x43, 0x0, 0x0, 0x0) 20:00:12 executing program 3: 20:00:12 executing program 3: 20:00:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:14 executing program 4: 20:00:14 executing program 3: 20:00:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974b", 0x48, 0x0, 0x0, 0x0) 20:00:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:15 executing program 3: 20:00:15 executing program 4: 20:00:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974b", 0x48, 0x0, 0x0, 0x0) 20:00:15 executing program 4: 20:00:15 executing program 3: 20:00:15 executing program 4: 20:00:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:18 executing program 3: 20:00:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974b", 0x48, 0x0, 0x0, 0x0) 20:00:18 executing program 4: 20:00:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:18 executing program 3: 20:00:18 executing program 4: 20:00:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654", 0x4a, 0x0, 0x0, 0x0) 20:00:18 executing program 4: 20:00:18 executing program 3: 20:00:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1081082) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 20:00:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000068030000c8010000d0000000d000000000000000c801000098020000980200009802000098020000980200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000002000000000100000000000000000000000000000000000000000000000000000000000000006966623000000000000000000000000076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069705f767469300000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280), 0x1c) 20:00:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654", 0x4a, 0x0, 0x0, 0x0) 20:00:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:21 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0xb6, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) [ 390.855847][ C1] protocol 88fb is buggy, dev hsr_slave_0 20:00:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:21 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 390.897272][T10790] x_tables: duplicate underflow at hook 2 [ 390.915692][T10790] x_tables: duplicate underflow at hook 2 20:00:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654", 0x4a, 0x0, 0x0, 0x0) 20:00:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:21 executing program 4: 20:00:21 executing program 3: 20:00:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb65469", 0x4b, 0x0, 0x0, 0x0) 20:00:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:24 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501140100fffdffff2ef6ff04610c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:00:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb65469", 0x4b, 0x0, 0x0, 0x0) 20:00:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 20:00:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) [ 394.064332][T10840] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 394.088426][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:00:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb65469", 0x4b, 0x0, 0x0, 0x0) [ 394.109505][T10840] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 20:00:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 20:00:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)='fS\a\x00', 0x4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 20:00:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x0, 0x0, 0x100000001) 20:00:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:00:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:27 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000ffffff7f000000000e0000000400000000030000d0010000f8000000d001000000000000f8000000680200006802000068020000680200006802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000028006367726f757000000000000000000000000000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000636f6e6e6c696d69740000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ffffffffe00000010000000000000000000000000000000000000000000000007465616d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x360) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x101043, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) openat$cgroup_procs(r5, &(0x7f00000007c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x13, 0x1, 0x0, 0x0, 0x20, r1, 0x7f, [], r2, r5, 0x4, 0x2}, 0x3c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r7, 0x9, 0x0, 0x6) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8810) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) close(r6) 20:00:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)='fS\a\x00', 0x4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 397.459536][T10897] x_tables: duplicate underflow at hook 2 20:00:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:27 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x20005d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x0, 0x2, 0x4, 0x0, 0x7, [{0xfffffffffffffff7, 0x6, 0x0, [], 0x104}, {0x81, 0x1, 0x20}, {0x43, 0x0, 0x8}, {0x1, 0x0, 0x1f}, {0x0, 0x0, 0x9, [], 0x20e}, {0xb70, 0x4, 0x0, [], 0x2}, {}]}) 20:00:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 397.529111][T10897] device bridge1 entered promiscuous mode [ 397.553731][T10905] ptrace attach of "/root/syz-executor.5"[10904] was attempted by "/root/syz-executor.5"[10905] [ 397.558643][T10897] x_tables: duplicate underflow at hook 2 [ 397.622117][ T27] audit: type=1804 audit(1581105627.982:72): pid=10909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir197914572/syzkaller.EVq8S0/159/file0" dev="sda1" ino=17328 res=1 20:00:28 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000ffffff7f000000000e0000000400000000030000d0010000f8000000d001000000000000f8000000680200006802000068020000680200006802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000028006367726f757000000000000000000000000000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000636f6e6e6c696d69740000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ffffffffe00000010000000000000000000000000000000000000000000000007465616d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x360) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x101043, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) openat$cgroup_procs(r5, &(0x7f00000007c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x13, 0x1, 0x0, 0x0, 0x20, r1, 0x7f, [], r2, r5, 0x4, 0x2}, 0x3c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r7, 0x9, 0x0, 0x6) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8810) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) close(r6) [ 397.766377][T10919] ptrace attach of "/root/syz-executor.5"[10918] was attempted by "/root/syz-executor.5"[10919] 20:00:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 397.880827][T10924] x_tables: duplicate underflow at hook 2 [ 397.912143][T10924] device bridge2 entered promiscuous mode 20:00:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000ffffff7f000000000e0000000400000000030000d0010000f8000000d001000000000000f8000000680200006802000068020000680200006802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000028006367726f757000000000000000000000000000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000636f6e6e6c696d69740000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ffffffffe00000010000000000000000000000000000000000000000000000007465616d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x360) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x101043, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) openat$cgroup_procs(r5, &(0x7f00000007c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x13, 0x1, 0x0, 0x0, 0x20, r1, 0x7f, [], r2, r5, 0x4, 0x2}, 0x3c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r7, 0x9, 0x0, 0x6) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8810) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) close(r6) 20:00:28 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000ffffff7f000000000e0000000400000000030000d0010000f8000000d001000000000000f8000000680200006802000068020000680200006802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000028006367726f757000000000000000000000000000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000636f6e6e6c696d69740000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ffffffffe00000010000000000000000000000000000000000000000000000007465616d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x360) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x101043, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) openat$cgroup_procs(r5, &(0x7f00000007c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x13, 0x1, 0x0, 0x0, 0x20, r1, 0x7f, [], r2, r5, 0x4, 0x2}, 0x3c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r7, 0x9, 0x0, 0x6) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8810) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r6, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) close(r6) 20:00:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 398.025947][T10930] ptrace attach of "/root/syz-executor.5"[10927] was attempted by "/root/syz-executor.5"[10930] [ 398.110924][T10936] x_tables: duplicate underflow at hook 2 [ 398.116199][T10937] x_tables: duplicate underflow at hook 2 [ 398.236875][T10937] device bridge3 entered promiscuous mode [ 398.250611][T10936] device bridge1 entered promiscuous mode 20:00:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)='fS\a\x00', 0x4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:30 executing program 2: epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) syz_emit_ethernet(0x29ba, &(0x7f0000000540)=ANY=[@ANYBLOB="4000000000000000aaaaaa0086dd60eaa83600442f00fe800000fe8000000000000000000000000000aa2420880b00000000d62b81e7a5cb0cae080088be0000000010000000010000000000000005080022eb000000002000000002000000000000000000000008006558000000003d7824d05d82840eb41bc8a4234a19f35e40742253ad226fe2"], &(0x7f0000000000)={0x0, 0x2, [0x2, 0xf46]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r4, r5, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x40}}, 0x0) 20:00:30 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000400)="260000002200470508d258002b1f00eb0101c7033500b000"/38, 0x26) setsockopt$sock_int(r1, 0x1, 0x20800000000008, &(0x7f0000000280), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000) 20:00:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:31 executing program 4: fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:31 executing program 4: fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:31 executing program 4: fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:31 executing program 2: epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) syz_emit_ethernet(0x29ba, &(0x7f0000000540)=ANY=[@ANYBLOB="4000000000000000aaaaaa0086dd60eaa83600442f00fe800000fe8000000000000000000000000000aa2420880b00000000d62b81e7a5cb0cae080088be0000000010000000010000000000000005080022eb000000002000000002000000000000000000000008006558000000003d7824d05d82840eb41bc8a4234a19f35e40742253ad226fe2"], &(0x7f0000000000)={0x0, 0x2, [0x2, 0xf46]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r4, r5, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x40}}, 0x0) 20:00:31 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x8402) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 20:00:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="665307000005", 0x6}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:33 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x8402) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:33 executing program 2: epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) syz_emit_ethernet(0x29ba, &(0x7f0000000540)=ANY=[@ANYBLOB="4000000000000000aaaaaa0086dd60eaa83600442f00fe800000fe8000000000000000000000000000aa2420880b00000000d62b81e7a5cb0cae080088be0000000010000000010000000000000005080022eb000000002000000002000000000000000000000008006558000000003d7824d05d82840eb41bc8a4234a19f35e40742253ad226fe2"], &(0x7f0000000000)={0x0, 0x2, [0x2, 0xf46]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r4, r5, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x40}}, 0x0) 20:00:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0xb, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 20:00:34 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x8402) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:34 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 20:00:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 20:00:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="665307000005", 0x6}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:37 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:37 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:37 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:37 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) 20:00:37 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x0, 0x0, 0x100000001) 20:00:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x0, 0x0, 0x0) 20:00:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x0, 0x0, 0x0) 20:00:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="665307000005", 0x6}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8402) fallocate(r0, 0x0, 0x0, 0x0) 20:00:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:40 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000007c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x9d, 0x4, 0x3f8, 0xc8, 0xc8, 0xc8, 0x1ac, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xf631}}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv4=@empty, [], @ipv6=@remote, [], @ipv6=@loopback}}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) r3 = getpid() tkill(r3, 0x9) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpid() r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1, @remote}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x278) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000004c0)) 20:00:40 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000007c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x9d, 0x4, 0x3f8, 0xc8, 0xc8, 0xc8, 0x1ac, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xf631}}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv4=@empty, [], @ipv6=@remote, [], @ipv6=@loopback}}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) r3 = getpid() tkill(r3, 0x9) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpid() r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1, @remote}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x278) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000004c0)) 20:00:40 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x8311, 0x2, 0x4, 0x7fffffff, 0x7, [{}, {0x81, 0x1, 0x20}, {0x43, 0x8, 0x8}, {0x0, 0x0, 0x1f, [], 0x1680}, {0xb70, 0x0, 0x9}, {0x9098, 0x9, 0x1, [], 0x100}, {0x0, 0x0, 0x401, [], 0x1a00}]}) 20:00:40 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r106 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r106, 0x80006) 20:00:40 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="0ca64e0c9cdc4f5c2df7d93022b70d825039976c22e07770b67a704f6137ffb1e38c8172908602b3", 0x28}], 0x1, &(0x7f00000006c0)=[@hoplimit={{0x10, 0x29, 0x3e}}], 0x10}}], 0x1, 0x0) [ 411.816319][ T0] NOHZ: local_softirq_pending 08 20:00:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c", 0x7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:43 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x8311, 0x2, 0x4, 0x0, 0x2, [{}, {}]}) creat(0x0, 0x0) 20:00:43 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r105, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) 20:00:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:43 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x8311, 0x2, 0x4, 0x0, 0x2, [{}, {}]}) creat(0x0, 0x0) 20:00:43 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) 20:00:43 executing program 4: set_mempolicy(0x0, 0x0, 0x3ff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x0, 0x0) gettid() creat(0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x3) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0xfff, 0x0, 0x100000000, 0x3, 0x4, 0x8001}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) 20:00:43 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r105, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:00:43 executing program 4: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x2, &(0x7f0000000180)=0x9, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x0, 0x0) r0 = creat(0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x130) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000300)=ANY=[]) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) creat(0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) creat(0x0, 0x20005d) 20:00:44 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) r105 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r105, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:00:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c", 0x7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:46 executing program 4: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x2, &(0x7f0000000180)=0x9, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x0, 0x0) r0 = creat(0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x130) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000300)=ANY=[]) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) creat(0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) creat(0x0, 0x20005d) 20:00:46 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 20:00:46 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 20:00:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:46 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r104 = socket$inet_udp(0x2, 0x2, 0x0) close(r104) splice(r103, 0x0, r104, 0x0, 0x4ffe0, 0x0) 20:00:46 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) [ 416.479514][T11189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.489335][T11189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.566134][T11189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:47 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)) r103 = socket$inet_udp(0x2, 0x2, 0x0) close(r103) [ 416.710677][T11199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.745846][T11199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:47 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) 20:00:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:47 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) [ 417.103402][T11206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 417.156032][T11206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c", 0x7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:49 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) pipe(&(0x7f0000000200)) 20:00:49 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) 20:00:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:49 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 419.215341][T11222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.277026][T11222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:49 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) r102 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r102, r100, 0x0) 20:00:49 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) [ 419.590440][T11241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.646178][T11241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:50 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) socket$inet(0x2, 0x4000000000000001, 0x0) 20:00:50 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) open(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) [ 419.862807][T11248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:00:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 419.905867][T11248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:50 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) sendfile(r100, r101, 0x0, 0x8000fffffffe) [ 420.114353][T11248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.185890][T11248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:52 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) 20:00:52 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r101 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r101, 0x80006) 20:00:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:52 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 422.424435][T11275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:00:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) [ 422.505935][T11275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:52 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r100, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) [ 422.724882][T11275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.775864][T11275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:53 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) 20:00:53 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) 20:00:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 423.118426][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.227654][T11293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:53 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r100, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:00:54 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) [ 423.821213][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.896107][T11308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:55 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) r100 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r100, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:00:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:55 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x6, 0xed, 0x0, "a0246913b00cdc1857f75b4b475a1587543d9c", 0x0, 0x38d}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "adff23ddde5eb87fb90e2fd75485d323"}, 0x15, 0x3) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x29, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba0000000000000000004ed9cd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x6}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, @echo_reply={0x11, 0x2b}}}}, 0xfdef) 20:00:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 425.493967][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.577017][T11318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:00:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:56 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x400000000001, 0x0) 20:00:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0xfffffffc, [{0x3, 0x0, 0x2}], "f3"}, @datasec={0x2000000, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20) 20:00:56 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '4\x00', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) [ 425.799232][T11338] BPF:[2] meta_left:4 meta_needed:12 [ 425.805717][T11338] BPF:[2] meta_left:4 meta_needed:12 20:00:56 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) sendfile(r98, r99, 0x0, 0x8000fffffffe) 20:00:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 426.073594][T11345] kvm: emulating exchange as write 20:00:56 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r99 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r99, 0x80006) 20:00:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:00:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:00:58 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r98, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) 20:00:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:00:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:00:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:00:59 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) 20:00:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:00:59 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r98, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:00:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:00:59 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) r98 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r98, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:01:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:01:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:01:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:01:01 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) socket$inet6(0xa, 0x400000000001, 0x0) 20:01:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:01:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:02 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) getresuid(&(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)) 20:01:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:02 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) getpgrp(0x0) 20:01:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 432.306095][ T0] NOHZ: local_softirq_pending 08 20:01:02 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008fc0)) 20:01:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:01:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 433.586548][ T0] NOHZ: local_softirq_pending 08 20:01:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07", 0x8}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0xfd9c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:01:04 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) r97 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r97, r95, 0x0) 20:01:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x113}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x40}], 0x3, 0x0, 0xffffffffffffff80, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:01:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:01:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608cee37cbd368e198a3af0ee0aedc3a8149ccfcfecf498ff8f47950289c2967426acd846a49fd22044869bdc0ff0cafdc092dd3e5f2728dd3738ee9f375d8979e09ca1426274eb04340008dc12de7d12a2d1d991f680b02e12bda5c121bb117443b7e280108d7266a4dd4d0b7e8a84682022113d1500769590a30515a460efd4b03f51f3161691c91d3c5b79ac9da66bc7b62c20c10080c9e461665114763f5126b747f67748382aac217944570c8c51d63511bc45fe5c425ea10a42f3062aa02cef4226cd8ce20f09c06ee6", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 20:01:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:05 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) socket$inet(0x2, 0x4000000000000001, 0x0) 20:01:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:05 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) sendfile(r95, r96, 0x0, 0x8000fffffffe) 20:01:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:01:05 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/autofs\x00', 0x2d07c1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1c07000800643d000000", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000003ff,allow_other,default_permissions,uid<', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f752e766d6e6534302f7b7b2c736d61636b66730061743d63702e47504c25272c00fa3ded198bac380b96b023b5"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r9, 0x80006) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r10, r8, 0x0) epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004380)={0x0, 0xff, 0x28}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/uinput\x00', 0x802, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000004400)=@abs, &(0x7f0000004480)=0x6e, 0x80000) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)) getpgid(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000000)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000004600)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004680)='ns/time_for_children\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r14, 0x80047441, &(0x7f0000000000)) accept4$unix(r14, 0x0, &(0x7f00000046c0), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004b00)='/proc/thread-self\x00', 0x14d002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x4ffe0, 0x0) fcntl$getown(r17, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r19, 0x80047441, &(0x7f0000000000)) statx(r19, &(0x7f0000004b40)='./file0\x00', 0x2000, 0x2, &(0x7f0000004b80)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/thread-self\x00', 0x80000, 0x0) r21 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r21, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r21, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r22 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r22, 0x80006) sendfile(r21, r22, 0x0, 0x8000fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r23 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r23, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r23, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r24 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r23, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r24, 0x80006) sendfile(r23, r24, 0x0, 0x8000fffffffe) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r25, r23, 0x0) r26 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r26, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r27 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r26, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r27, 0x80006) sendfile(r26, r27, 0x0, 0x8000fffffffe) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r28, r26, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r30 = socket$inet_udp(0x2, 0x2, 0x0) close(r30) splice(r29, 0x0, r30, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r29, 0x80047441, &(0x7f0000000000)) r31 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r31, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r31, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r32 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r31, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r32, 0x80006) sendfile(r31, r32, 0x0, 0x8000fffffffe) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r33, r31, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r34) getegid() inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) r35 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r35, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r35, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r36 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r35, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r36, 0x80006) sendfile(r35, r36, 0x0, 0x8000fffffffe) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r37, r35, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004d40)) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r38) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000004d80), &(0x7f0000004dc0)=0xc) r41 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r41, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r41, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r42 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r41, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r42, 0x80006) sendfile(r41, r42, 0x0, 0x8000fffffffe) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r43, r41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/urandom\x00', 0x80000, 0x0) r44 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r44, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r44, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r45 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r45, 0x80006) sendfile(r44, r45, 0x0, 0x8000fffffffe) r46 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r46, r44, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000072c0)='/proc/self/net/pfkey\x00', 0x1c1001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0x4ffe0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000007300)='/dev/bsg\x00', 0x501400, 0x0) r49 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r49, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r49, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r50 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r49, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r50, 0x80006) sendfile(r49, r50, 0x0, 0x8000fffffffe) r51 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r51, r49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r52, 0x0, r53, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r52, 0x80047441, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r54 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r54, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r54, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r55 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r54, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r55, 0x80006) sendfile(r54, r55, 0x0, 0x8000fffffffe) r56 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r56, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r56, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r57 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r56, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r57, 0x80006) sendfile(r56, r57, 0x0, 0x8000fffffffe) r58 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r58, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r58, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r59 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r58, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r59, 0x80006) sendfile(r58, r59, 0x0, 0x8000fffffffe) accept4(r59, 0x0, &(0x7f0000008500), 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r60, 0x80047441, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000008540)='/dev/ppp\x00', 0x44082, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r62 = socket$unix(0x1, 0x1, 0x0) r63 = socket$unix(0x1, 0x1, 0x0) r64 = dup2(r63, r62) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r64, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, 0xb21, 0x8}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, r65}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008580)=r65, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000085c0)='net/netstat\x00') socket(0x18, 0x5, 0x66) socket$inet_tcp(0x2, 0x1, 0x0) r66 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r66, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r66, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r67 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r66, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r67, 0x80006) sendfile(r66, r67, 0x0, 0x8000fffffffe) r68 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r68, r66, 0x0) r69 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r69, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r69, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r70 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r69, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r70, 0x80006) sendfile(r69, r70, 0x0, 0x8000fffffffe) r71 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r71, r69, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000008600)='./file0\x00', 0x100, 0x2e) r72 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r72, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r72, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r73 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r72, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r73, 0x80006) sendfile(r72, r73, 0x0, 0x8000fffffffe) r74 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r74, r72, 0x0) r75 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r75, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r75, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r76 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r75, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r76, 0x80006) sendfile(r75, r76, 0x0, 0x8000fffffffe) r77 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r77, r75, 0x0) r78 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r78, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r78, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r79 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r78, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r79, 0x80006) sendfile(r78, r79, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r81 = socket$inet_udp(0x2, 0x2, 0x0) close(r81) splice(r80, 0x0, r81, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r80, 0x80047441, &(0x7f0000000000)) accept$inet6(r80, 0x0, &(0x7f0000008b80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000008bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r82 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r82, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r82, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r83 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r82, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r83, 0x80006) sendfile(r82, r83, 0x0, 0x8000fffffffe) r84 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r84, r82, 0x0) r85 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r85, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r85, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r86 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r85, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r86, 0x80006) sendfile(r85, r86, 0x0, 0x8000fffffffe) r87 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r87, r85, 0x0) signalfd4(r87, &(0x7f0000008c00)={[0xfaee]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r89 = socket$inet_udp(0x2, 0x2, 0x0) close(r89) splice(r88, 0x0, r89, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r88, 0x80047441, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000008c40)={[0x7]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008c80)={{{@in6=@remote, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008d80)=0xe8) statx(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x800, 0x9351a6a4f8995e2b, &(0x7f0000008e00)) openat$tun(0xffffffffffffff9c, &(0x7f0000008f00)='/dev/net/tun\x00', 0x105000, 0x0) r90 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r90, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r90, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r91 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r90, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r91, 0x80006) sendfile(r90, r91, 0x0, 0x8000fffffffe) r92 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r92, r90, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r94 = socket$inet_udp(0x2, 0x2, 0x0) close(r94) splice(r93, 0x0, r94, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGDEBUG(r93, 0x80047441, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008f80)={0x0, r93, 0x0, 0x1, &(0x7f0000008f40)='\x00', 0xffffffffffffffff}, 0x30) r95 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r95, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r95, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r96 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r95, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r96, 0x80006) [ 436.985936][ C0] ================================================================== [ 436.994224][ C0] BUG: KCSAN: data-race in add_timer_on / timer_clear_idle [ 437.001402][ C0] [ 437.003781][ C0] write to 0xffff88812c11dbe4 of 1 bytes by task 0 on cpu 1: [ 437.011150][ C0] timer_clear_idle+0x42/0x50 [ 437.015816][ C0] __tick_nohz_idle_restart_tick+0x36/0x1b0 [ 437.021712][ C0] tick_nohz_idle_exit+0x1af/0x1e0 [ 437.026822][ C0] do_idle+0xb1/0x290 [ 437.030806][ C0] cpu_startup_entry+0x1b/0x20 [ 437.035567][ C0] start_secondary+0x168/0x1b0 [ 437.040338][ C0] secondary_startup_64+0xa4/0xb0 [ 437.045345][ C0] [ 437.049143][ C0] read to 0xffff88812c11dbe4 of 1 bytes by interrupt on cpu 0: [ 437.057015][ C0] add_timer_on+0x220/0x2e0 [ 437.061595][ C0] clocksource_watchdog+0x63f/0x760 [ 437.066836][ C0] call_timer_fn+0x5f/0x2f0 [ 437.071342][ C0] run_timer_softirq+0xbe3/0xcb0 [ 437.076393][ C0] __do_softirq+0x115/0x33f [ 437.080926][ C0] irq_exit+0xbb/0xe0 [ 437.084901][ C0] smp_apic_timer_interrupt+0xe6/0x280 [ 437.090353][ C0] apic_timer_interrupt+0xf/0x20 [ 437.095287][ C0] native_safe_halt+0xe/0x10 [ 437.099876][ C0] arch_cpu_idle+0xa/0x10 [ 437.104201][ C0] default_idle_call+0x1e/0x40 [ 437.109021][ C0] do_idle+0x1c2/0x290 [ 437.113085][ C0] cpu_startup_entry+0x1b/0x20 [ 437.118026][ C0] rest_init+0xec/0xf6 [ 437.122098][ C0] arch_call_rest_init+0x17/0x37 [ 437.127020][ C0] start_kernel+0x838/0x85e [ 437.131528][ C0] x86_64_start_reservations+0x29/0x2b [ 437.137090][ C0] x86_64_start_kernel+0x72/0x76 [ 437.142118][ C0] secondary_startup_64+0xa4/0xb0 [ 437.147224][ C0] [ 437.149668][ C0] Reported by Kernel Concurrency Sanitizer on: [ 437.155819][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0 [ 437.163797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.173962][ C0] ================================================================== [ 437.182107][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 437.188791][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0 [ 437.196807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.206858][ C0] Call Trace: [ 437.210133][ C0] [ 437.213051][ C0] dump_stack+0x11d/0x181 [ 437.217677][ C0] panic+0x210/0x640 [ 437.221703][ C0] ? __cond_resched_lock+0x10/0x70 [ 437.226938][ C0] ? vprintk_func+0x8d/0x140 [ 437.231532][ C0] kcsan_report.cold+0xc/0x15 [ 437.236298][ C0] kcsan_setup_watchpoint+0x403/0x4c0 [ 437.241677][ C0] __tsan_read1+0xc2/0x100 [ 437.246177][ C0] add_timer_on+0x220/0x2e0 [ 437.250726][ C0] clocksource_watchdog+0x63f/0x760 [ 437.255930][ C0] ? clocksource_select_watchdog+0x400/0x400 [ 437.262080][ C0] call_timer_fn+0x5f/0x2f0 [ 437.266630][ C0] ? clocksource_select_watchdog+0x400/0x400 [ 437.272755][ C0] ? clocksource_select_watchdog+0x400/0x400 [ 437.278734][ C0] run_timer_softirq+0xbe3/0xcb0 [ 437.283681][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 437.288870][ C0] ? sched_clock+0x13/0x20 [ 437.293290][ C0] ? sched_clock_cpu+0x15/0xe0 [ 437.298060][ C0] __do_softirq+0x115/0x33f [ 437.302553][ C0] irq_exit+0xbb/0xe0 [ 437.306538][ C0] smp_apic_timer_interrupt+0xe6/0x280 [ 437.311994][ C0] apic_timer_interrupt+0xf/0x20 [ 437.316982][ C0] [ 437.319922][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 437.325289][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 7c 4b 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 6c 4b 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 32 d0 90 fc e8 cd 78 ab fd 0f [ 437.345235][ C0] RSP: 0018:ffffffff85c03df8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 437.353639][ C0] RAX: 0000000000000000 RBX: ffffffff85c2b780 RCX: ffffffff8254a4f5 [ 437.361879][ C0] RDX: 0000000000000000 RSI: ffffffff8254a4fe RDI: 0000000000000005 [ 437.369975][ C0] RBP: ffffffff85c03e18 R08: ffffffff85c2b780 R09: 0000ffff85a2d160 [ 437.377942][ C0] R10: 0000ffff85c03e08 R11: 0000ffff85a2d167 R12: 0000000000000000 [ 437.386007][ C0] R13: ffffffff85c2b780 R14: 0000000000000000 R15: 0000000000000000 [ 437.394312][ C0] ? debug_smp_processor_id+0x35/0x137 [ 437.399784][ C0] ? debug_smp_processor_id+0x3e/0x137 [ 437.405333][ C0] ? default_idle+0x26/0x180 [ 437.411437][ C0] arch_cpu_idle+0xa/0x10 [ 437.415858][ C0] default_idle_call+0x1e/0x40 [ 437.420707][ C0] do_idle+0x1c2/0x290 [ 437.424854][ C0] ? do_idle+0xe7/0x290 [ 437.429019][ C0] cpu_startup_entry+0x1b/0x20 [ 437.433784][ C0] rest_init+0xec/0xf6 [ 437.437865][ C0] ? trace_event_define_fields_vector_free_moved+0xb4/0xb4 [ 437.445064][ C0] arch_call_rest_init+0x17/0x37 [ 437.450388][ C0] start_kernel+0x838/0x85e [ 437.454880][ C0] x86_64_start_reservations+0x29/0x2b [ 437.460340][ C0] x86_64_start_kernel+0x72/0x76 [ 437.465280][ C0] secondary_startup_64+0xa4/0xb0 [ 438.605076][ C0] Shutting down cpus with NMI [ 438.611750][ C0] Kernel Offset: disabled [ 438.616090][ C0] Rebooting in 86400 seconds..