\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = socket(0x16, 0x80000, 0x8)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r3, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ftruncate(r3, 0x800)
r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)=0x1)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
getrlimit(0x0, &(0x7f0000000000))
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xff7c)

23:15:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
fsync(r0)
socket(0x10, 0x371c957fbe306111, 0xfd)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x0, 0x1000000000000000}, 0xfd35)

23:15:30 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f00004b4000/0x3000)=nil, 0x3000, 0x100000d)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:30 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:30 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:anacron_exec_t:s0\x00', 0x24, 0x2)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:30 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc00, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xfffffe74}, 0xf)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:30 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xde3)

23:15:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
lseek(r1, 0x9, 0x7)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
ioctl$int_out(r3, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

23:15:31 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
sync_file_range(r1, 0xfffffc0d, 0x8000, 0x4)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x10000)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000000)=r3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:31 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x60)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
sync_file_range(r1, 0xfffffc0d, 0x8000, 0x4)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00tY^\xd7\xd2\rD\n\x1e\xbc\xc2iGO@r\b\x99\x92\xf5\xdc\x96\x88\xdck\xaa@\'1\x1b\x9e\x1aU\x06mt\x80\xb0a\x17tG\x12\xf1\x91\xfb\xc7\xfc\xe7=j\xa9B\xc6#|a.\xe8\x99\xb0}\x0e\xae(V\xe1!\x9e\x84l\x81\xf50\x15\x00\xf9\xb4\xd8`y\xacH\xef\x03\xb4B\xcef{G~\xcd/\x03\xa5\x1e\xc5\x11:\x1d\xca\xade\x01\xafk\t\x9fx<\xac/\xd3\xa75\xcc\v\x8c\xd7l}\x89\xe4\x86\x1a\x05\x12\x9c\xe1a\xaf\x01\xb5\xf7\xfc\xc9\x99Z\x0f\xf8\x91\x04\xc7\xf0\x94\x93\xa8\xe5\x8aW\xc9\xb3\xe6\xfe\xff\xa6>\x8d\x7f\t\xd38Q\xbc\xb1^~=\xa8<\x0e:\x83\x1b\xbe\xd3\xfb\xbc\xfb~y\xa6mY[|Q)\x1e\xfeQs\xcc\xf6\x9d\x13\xca\xc7\x83\x98\xea\xdb\xff\x86\xa6\vM\xb0\xf5p6\xd8c\xf8\xf8K]\"q\x9a\x87_\xcb\x82')
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
r2 = getpid()
prlimit64(r2, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000440))
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x1f, 0x0, 0xfffffffffffffff7, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd8cf, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x8, 0x7182, 0x0, 0x1}, r2, 0x1, r3, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:31 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mmap$perf(&(0x7f00003ed000/0x4000)=nil, 0x4000, 0xa, 0x80010, r0, 0x1)

23:15:32 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:32 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:32 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x811, 0xffffffffffffffff, 0x159c7000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:32 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:32 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000480)=0x7fe, 0x4)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10)
r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
recvmmsg(r4, &(0x7f0000003cc0)=[{{0x0, 0xfffffffffffffdbf, 0x0, 0x27b, 0x0, 0xed}}], 0x400000000000349, 0x12001, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000044c)

23:15:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, <r3=>0x0, <r4=>0x0}, 0x0)
r5 = getegid()
setregid(r4, r5)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
write$P9_RSTATu(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="790000007d020000005d00ee910080000000030000000800000000000000257c247f69000000ff03002101000080000000000c007369749d78caba79204e2c000c007369749d78caba79204e2c000c007369749d78caba79204e2c0006006367726f757007006c6f2973656c66", @ANYRES32=r8, @ANYRES32, @ANYRES32=r9], 0x79)
fsetxattr$system_posix_acl(r6, 0x0, &(0x7f00000000c0)={{}, {}, [{0x2, 0x710d4ae72b862615, r8}, {0x2, 0x0, r3}], {}, [{0x8, 0x1793b1bdb99c0a1d, r4}, {0x8, 0x7, r4}]}, 0x44, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:32 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:32 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x7)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:32 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
fcntl$setsig(r2, 0xa, 0x25)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r3, 0x8)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x68200, 0x0)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:33 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:33 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:33 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x20003fc, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40047705, &(0x7f0000000000)={0xffffffff, 0x1000})

23:15:33 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:33 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000800)='cpuset.\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\b\x83\xd3\x15\xdb\x03^\xef\xf3\x8c2NxgA@dK\xa8R<3\x1a;\xb4!\x13H4{\x02\xb5\x18\xa2x\xddOQA?\x84\xda6Eu^\x1a\nk\x12\xd2\x008,\xe9r\t\xbd\xcd\n\x19\xdf\xfb\xa6\xcd\xed\x89\xe3\x91\x983\b\xe5\xd6!z\x0eX\x1ev\xfa\xdf#{\xf2M\xbc\xc670M\xa1\xa3\xcda\xe0n\xc06\xe0djH\xee\xdc\x15I3\x81\x18\xd8\xcao\xaf\xc6\xfb\xf6\x94A\xd6\x92\xb0\xec\x82\x12Q\xc7?9\x98\x83\xc4o\xc0\\!\xf0Hm\xcc8<\xc4\x90/\xeeH\xa6\xe1\x9e\xe3\xa8\xf7_\x95G\xce\xdbm\x03\\\"\x9dZf\x1fxG\a\xf0\xb2\xdfY9\x85\xf4\xfd\x1as\xa2\x11{\xb0\xe4\xb3&\x8ag9\x13mIs8\xe9\xd7\xf1*\x1d\x06\x80\xa0v\xc4\xf9\x1c\x11\x9aP\xdc#\xafL\x02\x0f;\a<z\x0fc\xdb\x89fc\xba\xf3\xde\xf5gxQs\x19\\\xea|N\x02u\xfc\xd5U\xb0\t>y\x13Q\\\xf99\x01\x19\xcf\xa9\\\x10\xdb\x96\xbd\xf6r\x00\x85\xcb\xbd`Dl\xc9N\xa8bI\xf4\x87\xf5\xbf$\xe3\xc9\x06\xf8\xa8\n\x9ecw\x8d\r\xe2\xed\xf7<\xb5\xb02\xd0\xe7T\x06\r\x1c\x96', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8102, 0x0)
write$apparmor_exec(r2, &(0x7f0000000440)={'stack ', 'mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@'}, 0x191)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040)=0x400, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
r2 = getpid()
prlimit64(r2, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
getpgid(r2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
fcntl$setsig(r3, 0xa, 0x25)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0)
pipe(&(0x7f00000013c0)={<r5=>0xffffffffffffffff})
read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000180)=0x2, 0x4)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
r6 = getpid()
prlimit64(r6, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r7 = syz_open_procfs(r6, &(0x7f00000005c0)='net/igmpD&S>\xfd\x8b~\x026\x00\xbb\x1b\xbb\xb5\x1d\xe2\xa1!$\x1d\xa6\x16<\xe2kiq\xd6\xc7\xb3\xd1]\x00t\x97\xdfjz\xd4}O*\xb5\r\xb3j+\x14\x14\x87\xd7\x87B\xab\x12e\x8b\x9aKF\xc7n\xab\x7f\x16dIU04\xcbt\xa2N\x95\xc5k@=\xf4fM|d=9\x89\xf3\x9dZ\x81\x1d)r\xc22\x17\x14\xe4\x02)\xfav\xb0FU\x82\xfaj\xd8Fy\x7f[\xe9\xab\xc3*7\xfc&l\xf4\xadZ\xc8\xc8,\xbf\xf6\x19L\xfa\xed\x13\xc2h\x13\x18t\x1d`\xba\x19]\x192 \x8c\x94\xcd\xf426\x02\xc5}\x80\xdb\x85\xe3\x14I\xd1\x90\xb2\xe1-\xcd;g7Q\xa0{b\x7f\xb0aPm\x16\x7f\nv\xc4\xa0\xc2E\x92\xb3\xa3\xc3\xd9\xda^u\xdbx/(\xcdw\xc4\xac\b\x062A\xabP\bX\xc0\x1b\xef\xf7W\xbd\x1fda\x1f\x97\xfcH\xc0\x8dQ\x97\xe3\xee?\x04\xd7\xd4\x0e\xdd\x86\xc6u\xe8\x89#\xf6O~abU\x84r\xc1\xa3\xf8\x1bl\x95')
lseek(r7, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r7, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x24, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = memfd_create(&(0x7f0000000000)='ppp0\x00', 0x4)
pread64(r2, &(0x7f0000000cc0)=""/4096, 0x1000, 0x3f)
lseek(r1, 0x203ffffd, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020acc000100000000000020010000000000003afc74270fa9514f48ad73fe9b97d02c98ec43f22d22620c2b178e598a08cbeff4c5a19550fd86e6637c9b16f4541383bd40e1ff52ddcf934b8bdea16f48c1303b5b3ee1c189825f6682461011290c512c0ba0ef61c6804f458d0ad9cc47c92da00aceab3e79c5df4fd3610b2c12c33d8f9d0e2f86f402e8a21e495ae9cc4bc366dc7da3498db5730653bdedd3ef5e8b1dc820a589e3d96659d54a201c53a847907fbdc682a45d781a07a7e9b8e3f08044c6c8e9c6ae3f241812310200669463"], 0x24, 0x0)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x0)
write(r2, &(0x7f0000000440)="fb780358bd5bd4457baa24314da06f68d66654b52ae32951e7e588785f00e41e73426d46b51fa8d0f1e46c67fe150baf7f5d950a5d5e81956b31a7315d4f6e7690f100004f94f91fd7e95b3cd1c67d6156c3c600f64fc01106dbb89957cf432bdf93b72d2c20a82c817fb4436ecba76ba9bd0bd00d4d14311964ad34a49e8b6fa34d1988fd8783c2b9e74407d0561ccfc282166c9cf3aef9ff34c1fde56f7e8f63b710a92daf4838027f516b641f3c72b1f80dd1c31204f5c0b4f8a30c454e089658a741a053f8b4bf823447b7a152e6c1d4dfe08f34913287e6de18c5f45cba5555", 0xe2)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/user\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
fcntl$setsig(r2, 0xa, 0x25)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r3, 0x8)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x68200, 0x0)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:33 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:34 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x7)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:34 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:34 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0))
syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x2710}})
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:34 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000))

23:15:34 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/llc\x00')
lseek(r2, 0x203ffffd, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000000)={0x8, 'sit0\x00', {'veth1_to_hsr\x00'}, 0xe62})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A)\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffe, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='\x1c\xfat/ipx\x00\x87\x02\xbfz\xfcx\x857\x19\t\xa3:\xf6\x11E\x0f\x02\x00\x00\x00\x00\x00\x00\x00')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x1)
fcntl$setstatus(r1, 0x4, 0x60800)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000540))
getpgid(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0, <r7=>0x0})
r8 = syz_open_procfs(r7, &(0x7f00000000c0)='child\xc8\x82Ye\xfaT\xc2\xb00\x91\x15zI\xd7\x18c\xd9\x01\xb6\a\xcb\xfd\xcaCr\n\x9c@\xea\x99\x03\xe5a\xf2=\x7f>\x82\xe2\xcf\xc5\x1f\xd7\xa9Y,F,\x06=\xd1\xfb}3\xafpYk\xa88M5\"\x94(P\\2\x04\xe9\t\x00\x00\x00\x00\x00\x00\x00\x89\x83\xe6\t\x00~\xf2\x1f\x9e4Y\x05\x86\xd3\x9d6#9\x97S,\xe3\x8dn,\xab\x12\xc9\\\xbe\xb2\xa3\x81\a\xb1\x85t\xa6\xfdR\xb8\xd0(\x8a\xcc\xcbE\x89\x12o\xbf\xd1\x01\xae\xd4\xaf\xd5RV\x00r')
lseek(r8, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x24, 0x0)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x100, 0x0)
ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000500))
rt_sigsuspend(&(0x7f0000000480)={0x8000}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r8, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:34 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x100, @loopback}, 0x19)
lseek(r1, 0x203ffffd, 0x0)
pipe(&(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xf28f40f6cbf7710a, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x8ef75565979937d9, 0x0)
setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f00000004c0)="85925ee9f95288a10bc2236bf82fab4613bfccc01891fa4bec0fa1cb8532acd19dd4c3de2e27f1e8f3daa6b43c1ff642ebbcf1b478fb8941304de090c95fe19c71ff19dddb1a7d0738907c01e4ae7e24cc1019593d27f6356448eb956a48264cbbb8c2b3e3a6105577900dd8380575e38a2a93ff4d1cd48547ff045145af8caad944b71876a215dddbbbf4a6e72f925d729457aa4942", 0x96)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r4, 0x0)
fcntl$setsig(r4, 0xa, 0xe)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80800, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000440)="d3b9f225f7c676d3b8a81d3256bdb001d381b0372e84cca4919c2464c9f8768417b9ddd16ffa3b416bdfbe3a4d588ca70c8a82350093872bc664e228a3560b7fba6863b06be61c59c4ae9cc91f0cc411d2b05b5d7fe00ed365979d2b475546d34db0c3"}, {&(0x7f0000000980)="045d20a7e1385cc8de529f803e3c0e2024b80f9eaf27711ec7a9140fdb7629df5201ef0536c37d1972f29f17eb0f6a604f90a2b608773996a7befe9382cfdd84fb19f3093970779e8d00f0ffffffffffffa0932b994f172020171d5e06cf7f2328f76523ee55cd6ebc742b1327b9b280874d18ba993231241630be2b96e1d6f8be39863025b28c04262d915cc8d8042dc8204b215bfb23951fee5e0feb2c05000a9bf9da9dbfa2a219616c3f1ea48854b8811c4892e8d91fefb1375fb3b5a5913a3aecd1bd204f7f49c0b765916413f862d6d9598e19a31d896cc58b8f52a2d72a5ca4fe25923c0f6929021bad38"}, {&(0x7f00000005c0)="f3c6d7a177087d7ba275d31a4194bbd9153d7dabc525890a1a0f382b800f0858ede929b29a2494d7f03c38c913039e4d2b0bd3fd875a20779360a4f570265711e675afee01f9c909259f1527d6ffc70bba35fe628f177d6ec472406ce73b594e3365c151f6dfa22f66ac2c8607d46fc996ea338cd9432cbec075dfffeb85201d1d16d0bf0041a6c4af8cf72e77d8d6dae0fc2b13a853e55f6d7fe81536fd92851ce77df12c8ac205719bbc2433d7dff855674d000b8a0167bf8fc1440e592c40c8"}, {&(0x7f00000006c0)="8898b145f8df16617625ac7deec6ec9f63983304ae126f0643790bce13eab66670085bf19e57a4a97ec50970a28646d69ae4b81bc1b82be386b98e9916e75fce6f643e915aca9af82a4300cbcd8defaecf4f32e04e5b68f911070a8e92bd5bb00183d68bde9bc06f5904dbacea8a0d8d7b939a19efa91a0a380d3fdfb80ac90e4adfe6c7831ee3daf603ae83d74a57d792580548c48e02c692bd1c21cf68d2c8819bdb8e4175ce9debc8492db4cb02ec984c26767c1670b7cde6d8cce93dcb6ce8a2227f5e41b31b0d0baad92dbbc5f8301e084fd8be676d58562ad8c9e533ee90c1c5d8fe846bf78034911454fa6b780b2093fb75e9"}, {&(0x7f00000007c0)="b17335f5f5ccc0a09eb69ab7d6afe15c2cb7320f48e62bedeebc9f9ac64ed2d5a238d436a14673ec7b53cc37e037853602a4a1b0eae2749ff73981a42b5ccad70f22d148a7b30ff6e5061316e54d4ad2e5c979c6dca16a6a683fdb50fc6cb35a97821e7056e1a730eb97c5c9287b57aa4966be44374f96ebee5594ab2e1b0930116a6d11fd83706454ec283292c6a477fd98ce3250d9e4f9d4d149df5decd32257c5a149aeeccfe00fd3a7bd97a8435a4e96315f4d1497ed0ba6f69e79a04eadf4203716dd7d9c102d2416b2b5df83bb6c3304d7bd3b52c60919b6e003372342651c904edcaac7f1fa272eeeede53e6d1f61e50ec847c3060d"}, {&(0x7f00000008c0)="3ff05233da83c579154b6258ae4ff9a8a170411e687a0a1f2981a604cd5d770f97d69b667c4ad548e007e76c94b26b2b91f5c5aaac7d19d062b4eec7d2dac04c20f56e83c887c1892edc0f"}], 0xc2, 0x7)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000001c0)=0x4, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
mprotect(&(0x7f00005dd000/0x3000)=nil, 0x3000, 0x3)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000002})
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
prctl$PR_GET_NAME(0x10, &(0x7f00000004c0)=""/221)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:35 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)

23:15:35 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:35 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)="bd2bae58b7041267a764a15bd90cebffe19e9850edb3269712290cc9e802182e9338c8794bb50b13a63df1cb6db8bf4d616d579597e0c67467968d4a504c80f6aa40e3548df8d0dd4859d0c205f5b96b69", 0x51)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="4347e137ce5fa9f78ef449abaae08e89b0818e", 0x13}, {&(0x7f0000000040)="d373950907d3865d72265f6f7687", 0xe}, {&(0x7f00000000c0)="22726381c78cceb101af9f237c561a14b11f4b3d623d1630efabdcc32bd1f83338442bfd839f13aed0f02668e4c210b39c5f30b214dbb3f5acc293a71b37474600811cbce0828252d47d49aa53719c7d80bb879ac1ca42b1d16dd6ca5970e9b2762e0b3d13da0a973ba9635b3b56e7fd58f99eb7ad77c26cb4aeedd4d618f325bd9c59d344f10f6fec460dfa5bfb3622904875d48aaacc7db38bae54c111f9208dbc59c17a13ccf2fb145b7591e06794eba851eff6b6944bc6155728d5f445fc7f61e963aba28bb77762d7711754a9d84f431f8c4b3e4a7d04920013392453", 0xdf}], 0x3, 0x1)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\a\r\x00\x00dV\x92M%\xfd)\x00\x00\x00\x00\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\xdfgZ\x10\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d\x19\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R$6>\xa6\r\xee\xe6\x15\xedG\x80\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf7f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x0f\x02!\xdcvG\xe1\xdf\xb7\xc5\x06\xb8\xd3xbd\xb1\x90F+\xca\xc9\xb1\xf1\xeaA\xe3dph\xfbV\xd2\xa5\x87\xc8\x11N\xfb\x91\xc3\f\xd6\xfc\xc6\xe0\xa6\x7f\x9d<\xde\x8f\xc4]\x86\xcc\x1b|\\\x9f\x9bt\xc4\x8eD\bY\x15a2\x85\xa7\xac\x16\x99!\x10\x1f\xd0\x9c\xd6\xeb\x82P\xf5\x7fh\xec\x9c\xec\x9f\xc8\x1a;\xf6\xf3\xd1\xfb\x83\x904&\x05{\x01Hu\x1e\xf7yp\xf1\x18\xc8\x8dP.#v\xa7\x17\xcc\x98\x9bG\xb6`NjP@\xf6&K\x9d\x00\xfd\x9a*\x80\xe1\x91\xf7)\xabo5;\x9aM\"/C\xd7@G\xae/\xa5\xd5O\xea\f\xbe\xff\x06\xf1\xaa*_hf:L\xce\xbeO\t\x00\x00\x00\x00\x00\x00\x00\xc7t\x9bu\x8c\xa4\xb2&\x93\x88o\x7f\xe9b\x1f\xdf\x97$\xb4\xcc\xbc\x7f\x01cS')
lseek(r1, 0x203ffffd, 0x0)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x5, 0x5, 0x3, 0x4bd4, 0x1f})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={<r7=>0xffffffffffffffff})
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
write$FUSE_INTERRUPT(r7, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10)

23:15:35 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02e4ff000100000000000000040000000000000095ffbe13d92acf0d1000010000002000000b00000000d8a5d084ace0ff5fd43ac18e82f003f5fdbc000083256e8904c530e51a000000000000000000000000fc596e0157ced6cd75d0026fd5373d88b7888010fd83c9ff9e2744c488e0451bc47cca1ad1463d2c0cb7aa37a846f490331e28689707360da71981172a22e74c42010df444961feb41210354487850354dd45ac700"/183], 0x24, 0x0)
r2 = getpid()
prlimit64(r2, 0x9, &(0x7f0000000040)={0x10001, 0x3}, 0x0)
syz_open_procfs(r2, &(0x7f0000000000)='net/ip_vs\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0xfffd}, 0xf)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00')
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
read(r1, &(0x7f00000000c0)=""/107, 0x6b)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:35 executing program 2:
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x183002)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:35 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
socket(0x1, 0x4, 0xbb)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000d5a6000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:36 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:36 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:36 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mlock(&(0x7f0000797000/0x2000)=nil, 0x2000)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000001001d00000000001700000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:36 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
pipe(&(0x7f00000013c0)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, [], [{0x6, 0x9, 0x4c, 0x200, 0x3, 0xe6}, {0x9, 0xc8, 0x4, 0x6, 0xe8, 0x200}], [[], [], [], []]})
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000000100a077a1bab4c489d4310000000000000400fc0000000a0000080000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400080, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100))
r4 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000180)=""/72)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0x7, 0x1f, 0x294a, 0x1}, 0x14)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000))
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:36 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:36 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:36 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="23000000030000000003000000000000010000000000000002000000000000007bba2f2f00"], 0x23)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r1, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x6)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r5)
keyctl$instantiate(0xc, r4, 0x0, 0x0, r5)
write(r3, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000006c0)={0x9a, 0x8})
clock_getres(0x5, &(0x7f0000000680))
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r3, 0x68356000)
write$binfmt_elf32(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1a6)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
ioctl(r2, 0x7, &(0x7f0000000600)="58c382b1ff9eb84ecfb6334479444380822e654e4d8101d260718b60cfc26ff78b4ebef64d8cfd763a01bd8629545703338bbf32d25cbf6d117f83386dcd95c55fea3ff39cddc19e95a45dec9cef9658911fcd793e48f82babbed9e6bfada7d4ee820f896e8fc8ba79428dda6a4bcd44c7c08b164b8f")
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000600abcf86077c5a1ff1058a54961a6aaafa8a5a9751e55100081d03ce96377f700000000000020000000d1727f77a7b3288100"/66], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x0, 0x4}, 0xf)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r6)
r8 = request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', r7)
keyctl$invalidate(0x15, r8)
r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r9)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r9)
r10 = add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000800)="a9c258d7a361f837ab79cd32d61ca521ce3280f83ea132744639f92431266589d203ca702909dc8e792002266bfb25ee6ec2ba0920c3774fc661b69ffa036705362bf81d5e04f3cf6e042496ff33131da09b1ae80505ef952145e26a5d9028318c6fc7a6a011c4ca0e5e3fc40ba8110a43c452397bfff800c1f58efd74114e4b1b87e5a41654", 0x86, r9)
keyctl$unlink(0x9, r8, r10)

23:15:37 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:37 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:37 executing program 2:
syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cpuset.memory_pressure\x00', 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000680)={@initdev, @initdev, <r2=>0x0}, &(0x7f00000006c0)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000700)={@mcast1, 0x4c, r2})
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r3, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xffffffffffffff47, 0x1f, 0x1, 0x800000000004}, 0xffffffffffffff30)
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @local}, &(0x7f0000000440)=0xc)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r6, 0x0, 0xfffffffffffffffc)
sendfile(r4, r6, &(0x7f0000000040), 0x8000fffffffe)
ftruncate(r6, 0x2)
ioctl$UI_DEV_DESTROY(r6, 0x5502)

23:15:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
fcntl$setsig(r2, 0xa, 0x25)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x140400c1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800385, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'nlmon0\x00', 0xa01})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00')
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:37 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:37 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:37 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
read(r2, &(0x7f0000000000)=""/117, 0x75)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
fstat(r0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

23:15:37 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00')
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:38 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/72)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x5, 0x3, 0x4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvfrom$unix(r3, &(0x7f0000000440)=""/255, 0xff, 0x10100, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x3, 0x7, 0x100000001, 0x2, 0x3, 0x3, 0x108, 0x38, 0x74, 0x7, 0x1, 0x20, 0x5, 0x8, 0x8c4, 0x7ff}, [{0x60000000, 0x10001, 0x0, 0x81, 0x3, 0x3, 0x800, 0xa0e}, {0x5, 0x200, 0x2, 0xffd, 0x9, 0x7fff, 0x5, 0x6}], "66f6c0f7f5edc6b8c1d6c65a623eb608000b6639365987", [[], [], [], [], [], [], [], [], []]}, 0x98f)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000008f0000000000000004000000000000001000000000000000200000000000000016e78f69aec9397f1e10a390df929d8ef05f2ea3a89fe2d7e58d7a30c22e7d7ec2c6a13710d746d2edd18a5ae4ea59"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
read(r2, &(0x7f0000000000)=""/117, 0x75)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)="15dba3947b14e50d7cfce2a8ad8daa54ddfa35dc001a77511d6f080d5b8748790d7186fb3d77a1042f5b317938eb694e9a6fb28ad8a129a01cb593e89e24c38e3d")

23:15:38 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x0)
r6 = inotify_init1(0x0)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, <r7=>0x0})
ptrace$setopts(0x4206, r7, 0x0, 0x0)
ptrace(0x4207, r7)
waitid(0x1, r7, &(0x7f0000000000), 0x1000008, &(0x7f0000000180))
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000004c0)={{0x6, 0x0, @descriptor="3e9282b0fd8af48b"}, 0xfc, [], "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"})
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)

23:15:38 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
read(r2, &(0x7f0000000000)=""/117, 0x75)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:38 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000009e04b173f72d01e50000001000000000000000200000000078c3002d78534e770987e105d09e03f8cbe876c354dfd56d152cfbaa53f2fbc047a317983d6a35286da938d3d886dc02cd67afae656cbd11af13e4101199dda2043dae085e3498b2030b581f28030dfadfa84e70e5415cd925d955acc458a925089e248e7cca8705dd17"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)="15dba3947b14e50d7cfce2a8ad8daa54ddfa35dc001a77511d6f080d5b8748790d7186fb3d77a1042f5b317938eb694e9a6fb28ad8a129a01cb593e89e24c38e3d")

23:15:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000600)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:38 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/72)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:39 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:39 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x8, 0x5, 0x42}, 0xa)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="0e0d29814ecb5e07aab51b4f0dfc449b7d8d1b2eb07d2c58e2aaa123d5d9d8572a7f5e13d7b75c7f716bc585bc8f994cf51424f1fa2c07966f1772fbfb9af2b6e35914dc77341f5cea56", 0x4a)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:39 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r3 = getpid()
ptrace$setopts(0x4200, r3, 0x8001, 0xe2158b2b9ef73301)
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xffffffffffffffc5, 0x1f, 0x1, 0x1}, 0xf)

23:15:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000"/36], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
prctl$PR_SET_FPEXC(0xc, 0x100000)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)

23:15:39 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000001800)=""/151)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:39 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12764c7049617931)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:39 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
lseek(r6, 0x0, 0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r5})
bind$packet(r2, &(0x7f00000003c0)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0xfffffffffffffffc)
sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000180)=0x54)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r7, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23f73a3859bf4498000000000400c7052b3d00005e8000000000000020188090d0bf4f58f6f6f0ae13e966000000000000481fabd91dec38762aff9bf08a86d959036bb4a2dec8956d70125bb0d8c6e936bdae83e5b5d73e28b5e0df278198168b287b5b670d034b9a678bf3397fbbf91eb222145be130be3ef991a925a3d2036fb430561b11169dc3008856"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r7, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:39 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
ftruncate(r2, 0x80000001)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:39 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r5})
bind$packet(r2, &(0x7f00000003c0)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={[], 0x23}}, 0x14)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0xfffffffffffffffc)
sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe)
close(r1)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r6, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050220850f15d402000000010000eb4c7de73ca572070020"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r6, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000180)=""/72)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffffffffffee7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4810)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r9, 0x200, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x6, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x50800}, 0x0)

23:15:39 executing program 2:
r0 = getpid()
prlimit64(r0, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r1 = syz_open_procfs(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0))
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000200)=0x9, 0x4)
r3 = openat$cgroup_ro(r1, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
pipe(&(0x7f00000013c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000180)=""/72)
ioctl$PPPIOCSCOMPRESS(r6, 0x400c744d)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000000c0)={0x1ff, 0x8, 0x587, 0x8, 0x16, 0xc, 0x20, 0x74, 0x7, 0xc1})
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)={0xfffffff9, 0xf2be, 0x504, 0x8, 0x2})
lseek(r7, 0x203ffffd, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x400854d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x2, 0x6, 0x1ff}, {0x8, 0x5, 0x1, 0x7}, {0x7, 0x6, 0x9, 0x4}, {0x2, 0x1, 0x40, 0x900}, {0x0, 0x2, 0x65, 0x1}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r7, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:40 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r5})
bind$packet(r2, &(0x7f00000003c0)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={[], 0x23}}, 0x14)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0xfffffffffffffffc)
sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe)
close(r1)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r6, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050220850f15d402000000010000eb4c7de73ca572070020"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r6, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000180)=""/72)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffffffffffee7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4810)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r9, 0x200, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x6, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x50800}, 0x0)

23:15:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={{}, {0x1, 0x3}}, 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:40 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000001800)=""/151)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:40 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfareJG\xfcJ!3\xf4\x83nt\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X4\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x0e\xa3/!f\x8e\xaas\xe2l\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHxtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0x2}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)

23:15:40 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:40 executing program 1:
syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4000)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
recvfrom$unix(r3, &(0x7f0000000000)=""/82, 0x52, 0x12143, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:40 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:40 executing program 2:
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r3, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0xfffffffffffffee9)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r4})
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r0, 0x0, 0x2)
sendfile(r0, r1, 0x0, 0xfffffffffffffffc)
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x20)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000100)={0x7, 'syz_tun\x00', {0x80000001}, 0x2})
sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r10, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r11 = fcntl$dupfd(r1, 0x0, r10)
ioctl$ASHMEM_SET_SIZE(r11, 0x40047703, 0x5)
r12 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r12, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r13, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r13, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:40 executing program 2:
syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
openat$cgroup_ro(r0, &(0x7f0000000600)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f)

23:15:40 executing program 2:
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x800)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r10, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r11, r11, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r12})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r12})
bind$packet(r9, &(0x7f00000003c0)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r8, 0x0, 0x2)
sendfile(r8, r9, 0x0, 0xfffffffffffffffc)
sendfile(r8, r9, &(0x7f0000000040), 0x8000fffffffe)
sendfile(r9, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000780)={0x30, 0x5, 0x0, {0x0, 0x4, 0x8, 0x38}}, 0x30)
fcntl$setsig(r1, 0xa, 0x25)
r13 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$EVIOCGNAME(r13, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r13, 0x0, 0x0, 0x4000000, 0x0, 0x0)
preadv(r13, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f00000001c0)=""/9, 0x9}], 0x7, 0x5)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r14, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000005)
write$P9_RXATTRWALK(r14, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x2fb, 0xfffffffc, 0x3, 0xa4d, 0x18, 0x4, 0x9c, 0xa0, 0x80000001, 0xae, 0x7fff, 0x5})
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:41 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000001800)=""/151)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:41 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000001800)=""/151)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:41 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
pipe(&(0x7f00000013c0)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
openat$cgroup_ro(r1, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
mprotect(&(0x7f000022d000/0x3000)=nil, 0x3000, 0x400000a)
r3 = dup3(r0, r2, 0x80000)
pipe(&(0x7f00000013c0)={<r4=>0xffffffffffffffff})
read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000000c0)=0x7)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000180)={0x3, 'gretap0\x00', 0x1}, 0x18)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:41 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0}, 0x0)
r4 = getegid()
setregid(r3, r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r6=>0x0}, 0x0)
r7 = getegid()
setregid(r6, r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r9=>0x0}, 0x0)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/162)
r10 = getegid()
setregid(r9, r10)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000deff00000004000000000000000800048f", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="10000000000000002000040000000000"], 0x34, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x60e002, 0x0)

23:15:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x4013c2, 0x0)

23:15:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000440)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x055\xa0\xcc\xb7\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e9LY\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/373)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000b56cffe41d19a88d00"/42], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:42 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac141400000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)

23:15:42 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/72)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

23:15:42 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071")
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
write$binfmt_aout(r0, &(0x7f0000000400)={{}, "", [[]]}, 0x120)

23:15:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000099121e785ea55e20f72a5197f34ff720231a0c73893c81c97b57f539a1de97b1c2756163cfd1c2a248961806a0721efd90127ee7b625f23fd6bba22c61317a18f90b6ba9db7fe08813af94aab1476e4cdb4af4d5504611832c91b76137485f643af2b51e560b5b34982fb216a81a7d5a30626e6e99876e014486bc07b9a9ffd79ccd"], 0x24, 0x0)
syncfs(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x20}, 0xf)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071")
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
write$binfmt_aout(r0, &(0x7f0000000400)={{}, "", [[]]}, 0x120)

23:15:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000de00000000000000000400000000000000100000020020000020000000000000003d4510e38295f11882650fd8fb7f00bcfee3177d5248a138a35845c3ca3af96341ca0b722c514071e3e5b1d88f69bc510f1c411880f26ef4de0c5526ef2c569d69ee5c492bd01380b34b6e3d4a3ac68e73884b53bd062eb484cbf1a50e889ad6441912045c8ee8837bee6764a132934c5e715be473fc1aca97226bb3b3451fa86e90acf42595d478d2bbc3d02c54433c2dd335adb17c9dfea008ba10d5e20cb3f70d72b9f336737dd3a58237d1475900af6acfe156ddc91ae909b1f7c285adc2cb0c4d5918fcf2ffb2f382be04a11aa63a1d16c717f3fab6dbcc078dc158bd909075957637bd851274917e42c8ad782f7d80f8a26166f6045e02f660b2c4d729f2b2a2934fc8a86d682c6f33a7798119d6b42e2e85327a8c88c7e92ba15f2ca0db9bb988d005e9bbc38547f76f76dc3952675755e37cd71362ff9d509f0d9a20d50d8e328edd9c6fb6f11c8f53263fd8b0c7867a5f765274a95b818c08226ac29edf6f37006e475cf41a90c325015f36e08dea4fecf47abe32f54f3b73ffe13a28f7740b396973ac9d540a34399c30fa000000000000000000000015d63182c6"], 0x24, 0x0)
mprotect(&(0x7f0000068000/0x4000)=nil, 0x4000, 0x200000c)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:42 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:42 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000000))
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/72)
lseek(r2, 0x8001, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:42 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r1)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000003, 0x0)

23:15:42 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000))
pipe(&(0x7f00000013c0)={<r3=>0xffffffffffffffff})
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2008800c}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ffffff7f000000006bea7c2a", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf25010000000000000007410000004c001800001abc62726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e2b60a461ada833da658af41481155394d6f014dd1f80e5436bdb7e722bf82b3b80efa59e26c93f1be19de181df109217bf13b6c8e6add8a5dc3695b1fd84440f1dc78b5fcb429a33ccf3d7144388ab51ca71d87ae2e03390edfaa28bdc1b2ede038cd44bc6d8daa4796c8f6fd0c2faf362a488c6a2b8cac1041f284cd5b4fcb37a0b27476eece272dee7e776"], 0x68}, 0x1, 0x0, 0x0, 0x40408c0}, 0x40020)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
r6 = geteuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0xfffffef3)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x7fff)
ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r8, 0x0)
r9 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f0000000180)=""/72)
getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000540)=0x4f)
getresuid(&(0x7f0000000800), &(0x7f0000000840)=<r11=>0x0, &(0x7f0000000880))
r12 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r13=>0x0}, 0x0)
r14 = getegid()
setregid(r13, r14)
setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x2, r6}, {0x2, 0x9, r7}, {0x2, 0x1, r10}, {0x2, 0x1, r11}], {0x4, 0x7}, [{0x8, 0x1, r14}]}, 0x4c, 0x0)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000180)=""/72)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0xffecc000)
mprotect(&(0x7f00000b1000/0x4000)=nil, 0x4000, 0x10)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:43 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:43 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14)
sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a80)="896ba0bb6f474c8bffffffff0000", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

23:15:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=<r3=>0x0)
perf_event_open(0x0, r3, 0x1, r2, 0xcf6552c7bfa18f46)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:43 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0)

23:15:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
signalfd(r2, &(0x7f0000000100)={0x3}, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r3, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x612006c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x214, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6e}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x47a388fc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd93, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2b3048d9}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x44008)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1}, 0x0)
recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000017b)
r4 = dup(r3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e)
shutdown(r4, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x7f)
shutdown(r5, 0x0)
shutdown(r2, 0x0)

23:15:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r5})
bind$packet(r2, &(0x7f00000003c0)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r1, 0x0, 0x2)
sendfile(r1, r2, 0x0, 0xfffffffffffffffc)
sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe)
epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000000c0)={0x2}, 0x8)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r6, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r6, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:43 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0xfffffffffffffc00, 0x94b7, 0x9, 0x9, 0x2}, &(0x7f0000000100)={0x8, 0x95, 0x20, 0x0, 0x9, 0x100000001, 0x1, 0x8}, &(0x7f0000000140)={0x8, 0x3, 0x7f, 0x6618c484, 0x9, 0x8000, 0xfffffffffffffffb, 0x10000}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f00000001c0)={0xe03}, 0x8})
clock_adjtime(0x4, &(0x7f0000000000)={0x6, 0x10000, 0x10001, 0xdff2, 0x0, 0x2, 0x6, 0x4, 0x1, 0x7, 0xfff, 0xc7, 0x0, 0x7, 0x1f, 0x5, 0x1, 0x6f0, 0xe5, 0x610c25ab, 0x3f, 0x7, 0x6, 0x9, 0x0, 0x4})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000000000000000010000000000000002000000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
getpgid(0xffffffffffffffff)
r1 = getpid()
prlimit64(r1, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r2 = getpid()
prlimit64(r2, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r3 = getpgid(r2)
r4 = syz_open_procfs(r3, &(0x7f0000000000)='n@\x96\xcf\x8f\xc36g\xd3=\x02\xf3\x00s\x00')
lseek(r4, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r4, &(0x7f0000000080)={0xf}, 0x20000357)
r5 = getpid()
prlimit64(r5, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
sched_getattr(r5, &(0x7f0000000040)={0x30}, 0x30, 0x0)

23:15:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\xc25\x12\xfeu|<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vu\xde\xb3\x86\x91\xfd\xb5p\xdb$ z\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#\x88\x86}\xe6\x1c\xf1\x88f\xbc|\x84\x85\x15[NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x84\x12\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\x04\x00\x864fC*I\x7f?\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\x00'/409, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:44 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fchdir(0xffffffffffffffff)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0)
lseek(r2, 0x203ffffd, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)

23:15:44 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r2 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r2, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100))
r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0xfffffffffffffffc)
sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
fcntl$setsig(r9, 0xa, 0x25)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r11, 0x4, 0x6100)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r13, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r14, r14, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
bind$packet(r12, &(0x7f00000003c0)={0x11, 0x4, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0xfffffffffffffffc)
sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r10, @ANYPTR64, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r3, 0xfffff000)

23:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000)=0xa1bb)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r3, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
inotify_rm_watch(r3, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:44 executing program 4:
poll(0x0, 0x0, 0x46)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/128, 0x80}, {0x0}], 0x2}, 0x0)
dup2(r0, r1)
shutdown(r1, 0x0)

23:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = socket(0x4000e, 0x8000000000004, 0x5)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1469cf37a6e5528f6a6c3f7cab4819c230fc6ab634bc7c7350c2b825c169f8e5ede5a74660668ce03d58560d689bbca2fded99af804142e76060be21c7e6f360009d47b9006a831133b6a27fb50ed61d024d0fbc6c93993f7b5d1db954956a0965ad", @ANYRES16=r2, @ANYBLOB="000026bd7000fedbdf25050000000800060000000000080005004700000008000500000000000800060000100000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0xf4, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7a6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xd}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20018000}, 0x4044882)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x40082, 0x0)
lseek(r3, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x0)
fdatasync(r5)

23:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r3, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r4})
close(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:44 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000000))
utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x6, 0x1})
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x150, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='\x91Fe\x00/fu\x9c\x00', 0x80200, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
write$P9_RREAD(r2, &(0x7f00000000c0)={0xd0, 0x75, 0x1, {0xc5, "ce19b03809d955019de089a893917463859cfa06993b6db534d135244657e63a0a5fd40e8e0220de0bdfb69fdb16fbf9fe0e87ba9deef508437af5a948f0912dcc27e6ff955c80d51a3c9ff5e623655df5b53c0f9ce3d5933e2cf283c95c5f4007ec065a308451e5b29aa21903ce625b406d721ae8c738a498a5ea266d4c7836790357d77528fd81970c0d87d024006cb69612b527a63644cfec061f8df206429028441838426fd054df2ebb5a5393f55c83ed791ea698b0d825c070d654b28af357477f70"}}, 0xd0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000001c0)={0x0, 0x2, 0x2})

23:15:44 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x601}, 0xff3adfe7d290d808}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x80000003, 0x2)

23:15:44 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/74)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000cc0)=""/4096)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = getpid()
prlimit64(r1, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
syz_open_procfs(r1, &(0x7f0000000040)='schedstat\x00')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000013c0)={<r3=>0xffffffffffffffff})
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:44 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
socket$netlink(0x10, 0x3, 0xe)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2)
r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r2)
request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', r3)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r3, 0x9, 0xc}, 0x0, &(0x7f0000000040)="4c30014afb0ecb04ee", &(0x7f00000000c0)=""/12)

23:15:45 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xfffffffd}, 0x1c)

23:15:45 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
fcntl$setsig(r2, 0xa, 0x25)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)

23:15:45 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00')
lseek(r0, 0x0, 0x1)

23:15:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x23a8e537}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp6\x00')
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e20, @empty}, 'veth1_to_hsr\x00'})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xd}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x840000000002, 0x3, 0x200000000000ff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
dup(r4)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x84003ff)
ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000001c0)={0x7, 0xe025, 0x6})
ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r4, 0x4000000000005)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x81ff})
prctl$PR_GET_CHILD_SUBREAPER(0x25)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x72b)

23:15:45 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:45 executing program 2:
r0 = gettid()
getpgrp(r0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r2 = openat$cgroup_ro(r1, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
getsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
socketpair(0x3, 0x1, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff})
fadvise64(r4, 0x0, 0x5, 0x3)
lseek(r3, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000380)=0x1)
pipe(&(0x7f00000013c0)={<r6=>0xffffffffffffffff})
read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
splice(r6, &(0x7f0000000040)=0x8, r2, &(0x7f0000000140), 0x54, 0x2)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0xd3, &(0x7f00000000c0)="268581b85e4aec7a75822d794f6a8cb79bd896046421380b7ca0c211fc1f65f0d066152eace195491583ae183ed0d41adaa7f831322087834c6435e0fc53bc0f8ea252", 0x43)
write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7Swa9.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000003c80), 0x38e, 0x62, 0x0)

23:15:45 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r3, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x82a0cf9456aa2db6, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
getpid()
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
write$P9_RSTATu(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="790000007d020000005d00ee910080000000030000000800000000000000257c247f69000000ff03002101000080000000000c007369749d78caba79204e2c000c007369749d78caba79204e2c000c007369749d78caba79204e2c0006006367726f757007006c6f2973656c66", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7], 0x79)
ioctl$TUNSETOWNER(r2, 0x400454cc, r7)

23:15:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$binfmt_elf32(r2, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x6, 0xbb, 0x100000001, 0x1, 0x3, 0x400, 0x38a, 0x38, 0x3d, 0x6, 0x1, 0x20, 0x2, 0x9, 0x8, 0x20}, [{0x1, 0x1, 0xfffffff7, 0xffffff01, 0x4, 0x9, 0x7, 0x1f}], "6f5a100884dcb139f86831cbc96703e56f0011971dc7c518ed5dda06b2026855840828428db1546672df3e", [[], [], []]}, 0x383)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:46 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:46 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

23:15:46 executing program 4:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

23:15:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

23:15:46 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)

23:15:46 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000004c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@\\\xe9g9M\x8fm \xde2\xc0', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x120)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
r6 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8d, &(0x7f0000000900)=[{&(0x7f0000000680)="d10ac6b094e57a71af97367e21991e10e98acd6e643cea9166240f4629f754cf28678f58504e32ad688159a7c491762d8efc74f8afdbd75e4a279c12ff5e23f49f26ea41c3d976ee632e8976a3ec20e43065e6bf0631c1a5"}, {&(0x7f00000017c0)="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"}, {&(0x7f0000000700)="79cba4156881a43d6a2fa4ca9b97e2e5f8ee886b5cb70de0f43bf232e79cc68d5186656b6ed7849ae89d827176093756f2fcc76beebcb77d33e41e85dae5fe73564060104b1980743ffd22c4c07959a33756b4ab0e84b54d6d2b7619e21989b6164b95f46e0ed1a6"}, {&(0x7f0000000440)="cac11f83c864c88d60cf3b"}, {&(0x7f0000000780)="fdacdf2705d1a1b24c7acf3b8e9f8223efdc83e5d0"}, {&(0x7f00000007c0)="9baf03dbf97d42031fdc452f74adfa25879b6ea6de5b8951c2ccdf9cf5ece987b4cb5c6ef7a52a82cdc7369b74ba154f2f971cc1fdad53cd88000747973daabd94c08a51d6ae3ffa38b525cea5e89a5f5c32858433e6e1b814"}, {&(0x7f00000027c0)="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"}, {&(0x7f0000000840)="0f43c6b8b21238925385f58cb067aee066c745f7a1e93e4bf5ba73259c6347932d5d4fc42cc221512bc2a7ec67571b88925a74b356e33a27eb2ee57e37ccb6ccfb6b6e3db6f2a4650d58676d3d3a60915f62eeb886e925bfa325415d0f869c349e83d1352ec60ae52a14b212c42e396bd76d30e9b7e50c56a2593483bfce0f2c9b13d2461acdafe3a453e77387525d5cc6ce242bcdcf8982167b216d579f21510731b8c8b1ce08420b67b6231fc884c62dd6a4bd61c8ede28dda"}], 0x1}, 0x0)
connect$inet6(r4, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in, @in6=@local}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8)
r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r11, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r12, r12, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13})
bind$packet(r10, &(0x7f00000003c0)={0x11, 0x4, r13, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000a40)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe, r13})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r8})
bind$packet(r3, &(0x7f00000003c0)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000040)={0xa, 0x5, 0x3f, 0xd0}, 0xa)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02aa00000100200000000000040400092b0d2e48daf4c1ac2236768b7381d18952a41f"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

23:15:46 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:46 executing program 2:

23:15:46 executing program 2:

23:15:46 executing program 2:

23:15:47 executing program 2:

23:15:47 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r18, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r19)
fcntl$setsig(r19, 0xa, 0x25)
r20 = dup3(0xffffffffffffffff, r19, 0x0)
ioctl$EVIOCGNAME(r20, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r20, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r21 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r21, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r22 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r22, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r20, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r21]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:47 executing program 2:

23:15:47 executing program 4:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

23:15:47 executing program 2:

23:15:47 executing program 2:

23:15:47 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:47 executing program 2:

23:15:47 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r3 = getpid()
getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=<r4=>0x0)
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r9, 0x4, 0x6100)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r11, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r12, r12, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r13})
bind$packet(r10, &(0x7f00000003c0)={0x11, 0x4, r13, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r9, 0x0, 0x2)
sendfile(r9, r10, 0x0, 0xfffffffffffffffc)
sendfile(r9, r10, &(0x7f0000000040), 0x8000fffffffe)
sendfile(r10, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
write(r15, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r15, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r15, 0x0)
r16 = socket$packet(0x11, 0x3, 0x300)
r17 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r17, 0x4, 0x6100)
r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r19 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r19, 0x0, 0x0)
r20 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r20, r20, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r20, &(0x7f0000000000)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r19, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r21})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r21})
bind$packet(r18, &(0x7f00000003c0)={0x11, 0x4, r21, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r17, 0x0, 0x2)
sendfile(r17, r18, 0x0, 0xfffffffffffffffc)
sendfile(r17, r18, &(0x7f0000000040), 0x8000fffffffe)
pipe(&(0x7f00000013c0)={<r22=>0xffffffffffffffff})
read(r22, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendmsg$IPVS_CMD_NEW_SERVICE(r22, &(0x7f0000001440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
pipe(&(0x7f00000013c0)={<r23=>0xffffffffffffffff, <r24=>0xffffffffffffffff})
write(r24, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r24, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r24, 0x0)
r25 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r25, r25, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r25, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCGSID(r25, 0x5429, &(0x7f0000005d00)=<r26=>0x0)
r27 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41)
ioctl$EVIOCGSW(r27, 0x8040451b, &(0x7f0000000180)=""/72)
r28 = getpid()
prlimit64(r28, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0)
r29 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r31=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
write$P9_RSTATu(r29, &(0x7f00000002c0)=ANY=[@ANYBLOB="790000087d020000005d00ee910080000000030000000800000000000000257c247f69000000fff2002101000080000000000cb4cafbafaa7de9b979204e2c000c007369749d78caba79204e2c000c007369749d78caba79204e2c0006006367726f757007006c6f2973656c66", @ANYRES32=r30, @ANYRES32, @ANYRES32=r31], 0x79)
r32 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r33=>0x0}, 0x0)
r34 = getegid()
setregid(r33, r34)
sendmmsg$unix(r27, &(0x7f0000005dc0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)="c617b45c754dcb2f2247525da121859c34855a3fb95858fd88b5c8b985573a43d9930ca47456bc9d98eb0ccd13a87eb7175c537603809607cc22997432765b32ea580b8335c96344ee974ca4dccc176a57b2dc280398c7be", 0x58}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="eb91f9a88f01bb976d24945b6e16cb16988c71a1cb9e49d2a039c76d3f405a8341533b75b8d4354e74549577aa97da5c6703e434c0111d38fc99c386c822937c97461c6d73a4a2d2ae234bf26376e38bab30c7d6cc3377a0f62a89696840edf9fa8a8290eea124ba78c4a8e50c2a86715440f3700062634ed75891e886a315a307ec1692ffd7998ee74aa598d06dce06d14ae8f8e1901b55025ee22c314a43c3c48908caa75352a8054b8640adf00599e0248e47bf5cb02b3ec07ebd5e73189a4253218d5fec49423dda770da426b8f766835b8470242c1e0b64e14234c8f0c8d69e9c93f8a98debea588830fd90d152ad49037c5dd313cc02b647fd92f5a8220671b1dd004822ed6756957c9198ec6366dff87b7c57a58729bd2c80198870150871467648f7c8178b9e0551fa5a4cfceac8158b4979961d10fcb4428568e309dd5c5f9a8c492582dae91f0567705e027b97d690273ec0681f8739968786f8fe5f3237dabce22d016471625bbf915e733d40292c6e6c323658bad6cfc5615735bfeac837019985307bf005038e225e02f2eb74164e1b7f522fea9cb76a21255e1f06b53f0c653895904a63a500b45e6c7d2b0b929e6bd1664a2ea1088bcd0a5de53255353a8b5605260ba3bd051d8b2a1b983578eedafed1c9956e9a6b7108d165fc22b9af4e0aa099ed5ab7f13542336817c66e48e30697bb4a7fee8c667bcacd39c72aff34f9d1a71dfb76f436ff7ef2ead322e99ba681347e888b96e990cc942c6718e18f36f17a14e01ca5f4d03978827a61697563990da3d898ef6c6af5637c7acd4d763d675931486a083f3d1e799f9bd4fa7b9431e50a72e59897264a93743f6592e2d62d8db3e3a8ac529d908ad0d4027806b4ce3b2cdea19b1915a0c778b6e100a4bba68bed318066a0bebf39a41e89491fd182ca3f76ce26219ef6480e59e7baf1ed2e767adc002e4dadd08ee7dd817384062fc01ab3cbe5eeae58f600bbfa33c326492bf314ad33113e5f9dd8a256979dd92e5eb8f329601bc09217312a34508868e51c6f2d3f073a78d91c4df4044acba30dfe7b1a8c0135f907bd71e16dc19b8b0be3428a2dde92005bef5c808786af60389126db5aea0cd141d11378330f33dde45bab8b2db24ee1f74fefb0d83c0eae42555b5715e495bda7d71516730bf7604df295d4d628c1bf183f66f8d7a06142401da12fda60b06244902a7c9b1d1c69fb887a86037e84fa8c2a8befbbbd386affebba33fd311c68a501d0471cfa411d406c407dd9fce8160068dd04005b96c1cba34030b7e84aaa9b1b983eaad26ea1ab6bea44de3e85231a8d1e9f80257b590db5b0116486264b0c03c5c19964a1866ba12375725d4461eb99202c2a6666fa7e0301c2da0f8b46fe49650fa4ef1dce541f64bb824bbf1eb27d8b477950d0da98d0b82797602d9897e0d18d006a8361345761211b4160a17632c8047fd89201d53a844b15fae9efe58e4591ba12ddb5864335e4e1777536ecda078c670d0d04a779ca46f79fba1f47f372a9602647af472fb012494b27c926be9e835f56118e1c977283613da38c8c510791f70c9a33e95d191823115f2f542f634c6637c39e9d7a10061ced0e508eb991a4d14bf429e414ccd6d8f10156e0277c32b1925dda2be445d96d4667de797ce2aa517699fe1bfdecaa38f72669233bb66c3826679f86b5ddcfdd7564cfb78ecd843162fba9e7c09958bdb623b6d5ddd7c83aa01970c19780c4118c72e429644f012dce210d856b3582297bcd4a7fa268ee58c3c19f98939632e2a3eab567c1d673026a3efe5113adb855e40dfd277fbd53018570b2224e0b2d0609efb89876eec33842ffdc2dc94e327e2639488dbd319b2958ec0b143e375e44fd38074e1e053bdcef75f32016a6094e3217943c95e777f32cca55adc34a3c147e442f8698a00b44fae21d715e229f62f33dff7be9d28e18a76cd3c4103973032fe2a10168a7965b9914a7fa49063eb86bcf06a07e6a6ae1e0f9367e3f6be2bb6eafa82ef53eef3da8f2abcdc1b81c012f057f1de074ba4bb3b8d91bbd2cc60ae95a6bf94eb8528a558f6228013ce14e6270f1fa427e894169ccfb94a1f49689da1fc9b8a624f4c27bbd59dc02155ac1f9a2724c06694f5dc48fedb1c59ced6b7425696518e112c1c6646d0a83d8747067c70443866056997dc34bb30124113f7b301a00ed4056b7a30bdb5445c37e8a4a6bdb51b8a318299e3c7de02f8b2842096d3891f3ccd58b4627402b78fab9aa041beb85d9657e8cacca0dc4d93d3e697bcaaf740d23e8e1768efead0fe4657d7420ba614f9c20e4d6fbb757f6aa379a4be3238ec17a8ca0f55df317f9f41aeb7866cf7b08f40fa3699ebc21c48ffddd738b16f91327cb90288f40662e52b42de338d667cc789d454f370f433f441a59a5bb92d024716cc6e6e6a23734d64fd86918af9a5d9a1f894df32ddd390859ce5cb3ffab8ce750d43692b1106178cd888b3000f134d9d5862056e93d22db83a028d71cef2fb1bbc5f6c2abeb9d70d5e592dd49a51b841a392966ea23e753b5ead5377e93100a91b99527ab0b4d5ae1c8633206f7d8b57bf6d013cd72d40ad50afd2f9440a1bad0e64bacc2e916b1b5a31054eddbf9e224984de5c0d4c1abdd5d95ba82ac5b4d68e8caaa1c21719293237779f22e3160246e5129b04db83deb6e6d2db8314f12d462e3b32980a528285ed39370e0bf5ca3e58c0171324f5839182480b4ed8044d0ff195dbfd2c7cdde2ff507c7abe18a1bf85a7d3d03b06b66337112bf6e08d7bc97276ca96e65dea70e96a4367ba3b28a1433baabb270a8d97fbb0a191742f4f6b89df5ed76e377c0c49e63537d16f6c830cd6c11f17c43333b37345ff62f24167e79cb24aaf63eddb2a5a7f5fc64e9fd6e7ed0dd6817647abe40fdd6975d6d0e6fc98c8eec60c9a1175ac731c1129a4cfb8690bc4dffe3e3bbe72cebac1ccc78f7b42aefd0872ecbcead6f7b9ba9f0179476395d8886031d2ac979b905bc0ca4ebfdbaef43ad351b45249afd090db2e6e6ac155e1e4582d10f53917adf6f8817c7792c7df51136c735d9497e71d5683c739f6193580ccd6a32cc0c2563ad95e7e90ccd2cea2c08033d330f058e53fed07dc927219810063759faa47bd4cfc96b9186592a4ce715e8db542c740f0a28bc9393dfc39f189d78f2f1b933f8f62f537f7127d1a5a68b9352e58a86210b52985f575a16b206e155344fb45c66a5e186f1c00dd24043317116740e9b2b6ecc6a65b5880f63ef1197826d3778196ed1b0e4552007113e673ce4d6ef9834327cf65c63f669c7f4b998feca5a72bda8626e828d38a11dc5cc6b6fece81d2085f253984e9d6812ac0acef4a6c95faa4c64b60e562124fbf85be9af07121fd48ad645cd51e8ded7966220f17ca32d0e139e6b7b0d5721ab78264b34415a895295ea7ee8db479f51ffe641c4656d891f2ba64e881f624aaa0ac2717b86b9e71f46d22e35cfcca2ed950a6698f7b6bc61dbbbe79a28e648922aa329afd3edd3ac35f437bdbb36a6e389d28356080d5ec421de8b9f47bc6068c841fc4c86629af2549a14df80e35920fde0a3b7d39a770765dc51b2bd162cde7fe4114b3b16603ef1c1dae16ffd1182abaa64e329337ca3032b6492d25ff67542961f2e27a4b31bccf8e5e49e00d278b918e7f7eff006da2828359451516d4c3eb57e36611ed889b371933bee9f291d61f908a3a34bde4c449c71cc6472485e5089bd749c9bc6c3944ad334df348a3c5f731929addeaa7c4298460f59dfd43ea1377a7ab8ae6440a86099f20cc9a4208f5ce232612d07a61f0de23312cb182780cbb5ef34e1093210433ac5c17dead0ae27ec3af540bea32beabd2befbe0f4f23b04f8b32f5bfc913c2a293b087048e15fcb27d414dcd42354cbcb1e9382cb81a51085d9f877e342c5e512b01db146d363374c858acc648883c8421adadcd8629011dd7c7d928ca05355a1bdadeaf3de4b73e0cf0b6eb2f075c53613a9a4af9979485b8109d4286cbbfbff77195fe0e12bb8910e85a9ca94b1f77570b6fa579034d6acc817511122cc0888cee6803742e94e9cdebbe857e6b39625349c0df6d4ed2107cb13e774c19ae02265473d6376fe80c2aac14b43494442e2854e646c8a49c58f0194612ddf939f5aa05c2a6c8f8393545d42b6b0da216e2272aade76aedfbcbce1b7e4d8c9872a630d17addc4314ebf5bb8948b5697c65291e6e678e32c97d7f44d1415487a71b70e13ce96a5b243a1cb2e6003d3687f3dafead1337cb46031f4d7ca9f622db33597f989892c9e5b166ecb29a6a9da7ae6718d4b851e30a8aefb8140cb0c1ab67153ed509a62908f99148e843a0486ecd082012271d9e00e6611f9c36320243f190e97e17dd4cc1bea8ec56e616465565f07b4d2fec6500f081072834df14360fff83a648fa359a7053d66f97c77ef7e7245a31b4783593fdf24e44bfc763f451ad2515b438a18b3b639b02ee27a787e40d4854be819ce8e1733cf5f30802c7a28cc28275f00e08b9447e020203a052ecd47fb730fe57e766f9663adb41f7f3552d1c653cb4863f69f6e1af9cb9129093e0aa219d92d4deec25bf67e5720a06afb31c67022d75745c185d2f89157e1c18011eee70d37dd2dbe5a7993a0ab3302724a798ff2c2d997939221de70bf700fe7486211b009f7534a4b4fd45cb7ed143fa8ee781c33461de3a33b3fe3f6f6d8e16112fd9fbe13df1acc0a4d4e4ec62880800905b186d6938ca75fc606986de0f10346c4999726d5788a1544a28dc3b78261e2c94034fac4d761bc39cbd52dc781aca608eab9a4777ecc168fc482ad49994c2352582c3a974bcfdbcf7b04d392a6556c9c54db1e9e6bc6d7f3b4ae3a3876b26a845afbd4589fff8e6b097ba0a4d1333bcea1624d4b5716bdf2324dfb8ebbbcb0ffe73d7a67445a55e92b1f59e2899c92a6c1191b747250ad9146e5402c30937e785149165a196e70abb2ec64cf9250180c39c674af36dacbe5d58a90d66b86d495b0057012729385e5a043c2162a9cf760fadfbda566ae116e6b0932163fb9c33fd6e258b6ae03dfda2af37e40a6268e665b48cb1d1130b750875e68aee7f430a8a25201b5ab492d0d21b6ce04d86b513c8266e707876372fe29344ca277eb8dd0f037f23c4343b3bcee7c08a9280fac67e770dda8bf59a18845e58b9f1b6efc416a7b483e8c0c5050944b6f7dcc9a6f952c393aa0a945933ff09f44eda13e36e97021f6092c313438581a059a3f2a85684baa0add681283db5c4cdc9f9c0c98cb71fa095388be0f3a6a22cb6ed35ed8f782417d598c28a651606a6574b4dbf8d530d9ccd1ad237e900cbe638101b6df66911fd82d8de8cea02cdf668d9bbb77770d1a5108f717faec20dbb95e1e67fae47b2e7ce0a9d6403904207915e7f1f0c2a95ed55d1380a7dd0095137021e2d39c6d24d11b12a58137fbcb5e79716c97b03eb38e8ca3e42948a7691fe9bfd5dc3ddf8080bf0f24dcceb954b9404e51fa43ff5cfd7b99a942e2be994334ead9fc3ddae88b3d8892170f73db9148521787c99b2e8ec04bfa98857f3cbd6d002d6b9cff7e5a630a965a9e9f5a74effed6a0201b02cdc648080c99d85d7f35f1e703cf8096f66f934176d7c61bd187fb21f3c59d456ee23f254b4eb18a145d4c421483841672881f9f4ed4bc176c65bbf7b13123bcd8c92968f8215533fd0bc920774cb04f7738978516333f47f7da336b3a39626677772d1b54d71ccc", 0x1000}, {&(0x7f0000000480)="d78919da5b65a91eb40a2d3a1b69751bce66e222f596c03bfec06b595d0203b17997b2dcc4d248aec112edc241c143049f5b24e6837eea8a825134235f9af1c98a79d177b262c5676ec9ffd3383f8b70946b8d435093f352950a7d117b6ae4dd46b1f523bd016329ab18adecf0b083edad19d220329e3a40686d4203f21b386fe07de312664c9ff1034a20e3e7eba46230d50eef003305ac38a37b556d5f4c5a4f1322870309552aba0735cd2500f7207eb7f30773d339b247fe6454cfc4fa97a8", 0xc1}, {&(0x7f0000000580)="7aee2d3be0ad91343c2930cc48837ffecd54fe9570f0e21f2c9538ff2b8cdd6a5e5d820ebca7e9c199219e4a0009e76ea758a36acc", 0x35}, {&(0x7f00000005c0)="44e23604b9d486e36d44e08ab0f6b124f96b1f4459a3fb13e4aeee682eee744f068a3dd4f3c5e9239f4f23e9e15020d5bed1b6dea94fc88ba996806c2d521fac26c3c2fae306ec44beb10bd358", 0x4d}, {&(0x7f0000000640)="89ed35ac410286ebc9bb59dd615be9da8c975d", 0x13}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="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", 0x1000}], 0xa, &(0x7f0000005e00)=ANY=[@ANYBLOB="18000000010000000200000066ba6e7439964401c0b58fabf519b985aab55cec0e2815716fe1c70a420b8713e989bf0304d778a6e2e9894a608a66d18ed276d95e0376efccd253d5bd3f886b9e750fcf4562fd99edbe53dcdde4822e1bc70fc03438f8f725ff23b6c81b8509fdb22a7cdfd710a55fa7ee1310c43ddfdaa9db3fc77e73b2594cf93ac5f4882454a9f9c5aa8d09832e57c461a1f8f899133ed5ac67b4a3b59c0552a423e8100be99458fce430bb9412bcbac3d76c4bc13aaf3f227dee0a965144a08b9826537298214ceeed4bcafc6dbe0121009fb1266588b5eca869896fff24b8a35b28466ab529335fa587aef5c41e20f0acca51a3bebcf52cad9a616ccf0a5c32950fd2d314827df2fe51cd4d634ae3b7f69865da5b73caef2f011ec6bc8a5a54a25f0990eb8de1d9b9d7e88e622d504100faf1e88c0d514a464b4860b24750422a40ff41503192bc07645292e75e3de4612ffee494b3429ee4eb", @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=r28, @ANYRES32=r30, @ANYRES32=r34, @ANYBLOB="d243dfcbe100000000000000", @ANYRES32=r0, @ANYRES32=r16], 0x44, 0x81d0}, {&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f00000008c0)="6e3153df09bff59610f4f13673887d269287739eb5a47acc0a2b0d055288e5b3ca425260538c3c255586b32d7a871d490f4d0b851a9355aa3f360b331b156422631df1a69d66adc0f86913140533ef65a0df297f4aa21275acda63871141ec703870c7696c2fd7a84a5041fabd0277d131f6268ce7f74e452e88c169dd2e06d51e7b60ef1f3c0443755e47b808d32d27b74d7da45648da745c321d6c604667392b62f2f7471708940744f08e3c2830d44abfaef1f41577a19d6c411155a11860aed26bc050f7eb96579c294beb6607dc391bc808e605236a7dd07540ee69117194146777a931cf8e", 0xe8}, {&(0x7f00000009c0)="f6d51558271614f23e83be81d1deb3a49afe3da153f41912fa47767c2d2f4919cdec17de969987c63790136fdafd8b238816d57b179c3788852504429e3fb0d71ac8d1b9a25d487905091e1f651360935d08281bed06e4cfdaed5f8deb0200352ed098f3bf18a3bdeb12ba41c02d0dc68518285f35ffc6e2543235fe9983fc2ac649da9fd968be54b38d8f02c6366c2f50368e9099b70abf518b75cf2353559c1402e9585dc0a3668bfd43ca0855e6b22fbc62273a5b09d6a9b985e76517cef5533c7ad16823f50f8b0c33275bd41c52950123ca8ac48a59fd6fad32296c23b82b7cea", 0xe3}], 0x2, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [r17, r1, r22, r0, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r24]}}, @cred={{0x18, 0x1, 0x2, {r26, 0xee00}}}], 0x54, 0x4000}], 0x2, 0x20000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000104000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
r35 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r35)
r36 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r35)
r37 = request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', r36)
keyctl$invalidate(0x15, r37)
r38 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\\,,\x00', r37)
keyctl$clear(0x7, r38)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:47 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:47 executing program 2:

23:15:47 executing program 2:

23:15:47 executing program 2:

23:15:48 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:48 executing program 2:

23:15:48 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)
creat(&(0x7f0000000000)='./bus\x00', 0x0)

23:15:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0)

23:15:48 executing program 2:
poll(&(0x7f0000000180)=[{}], 0x1, 0x46)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/197, 0xc5}, {0x0}, {0x0}], 0x3}, 0x0)
shutdown(r0, 0x0)

23:15:48 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:48 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)="89"})

23:15:48 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:48 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
fcntl$setsig(r0, 0xa, 0x25)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r2, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r3, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xa4570ef)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r5)
fcntl$setsig(r5, 0xa, 0x25)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x4)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r4, 0x0)
ioctl$TCGETX(r4, 0x5432, &(0x7f0000000000))
write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x20000357)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r7, 0x0)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfc32, 0x2, 0x0, 0x2, 0xa, 0x14, "4c86377c41849b4f8415cfdb925f7823b46f0d73e2a86ae5cf60820defcbd9c1b293fc7e02f34c26f3ce9207817cfcefc042e6d1000587198246f6cad6180cff", "aba9a7836e2918e6d02c8dd77394a3a491e6b7e27a880e804f61c5cf092d3081c0718e322d4f8cd5c76e1dfc216cfb14bed734527ee962a310813b848f20b8cd", "a7ab26580e9dfcc4a7544ff5579dddb191386c78c6d7191944dbde93130a43cb", [0x7697b5df, 0x7ff]})
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000001000000000000000000002000"/36], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1}, 0x0)
recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r3, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4)
r4 = dup(r3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e)
shutdown(r4, 0x0)
poll(0x0, 0x0, 0x7f)
shutdown(r5, 0x0)
shutdown(r2, 0x0)

23:15:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02a200ffffffffff0a000004fab652ffb98abf0000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x0, 0x800000000000000}, 0xf)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
fcntl$setsig(r3, 0xa, 0x25)
dup3(0xffffffffffffffff, r3, 0x0)
dup3(r2, r3, 0x80000)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
fcntl$setsig(r2, 0xa, 0x25)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000ffffffff00000000000000b7eca667ebd90de6d821f3c340b7bc5b3332d7ee6a19b825b2ffff00000000808a3e000000000000000000000000000000000052be000000"], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 2:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:49 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fchdir(r0)
r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r1, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
bind$packet(r4, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
fcntl$setsig(r8, 0xa, 0x25)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r9, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r10 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r10, 0x4, 0x6100)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r12, 0x0, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r14})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r14})
bind$packet(r11, &(0x7f00000003c0)={0x11, 0x4, r14, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0xfffffffffffffffc)
sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r15, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write(r16, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r16, 0x0)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r17)
fcntl$setsig(r17, 0xa, 0x25)
r18 = dup3(0xffffffffffffffff, r17, 0x0)
ioctl$EVIOCGNAME(r18, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r18, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r19, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r20, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r9, @ANYPTR64, @ANYRESHEX=r10, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r15, @ANYRESHEX=r16, @ANYRES32=r18, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r19]], &(0x7f0000000140)=0x8)
write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0xfffff000)

23:15:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='st\x80\x00\x00\x00\xd9\"\x92\xa3\rKZ\xc5/$\x14\x12\xa7\xa9q\xea\x1f7Q#0d\x15\x9c\x11\x19\xd9\x8d2\xf97\xf0\x00\x16M\xac\xa7\xfc\xde\x96\x10\x82\xaa\xf6\x81PrV\xaa\x8d\xeb\tq\xfdx0\xe7\x80VLU\xefLF\x8f\xa1\x0f\xe6\x13c\xa8&\xe5\x80<u\xff\xa5&\xa2E\xe4\x92\xb0b!\xb27\x86\xc2N\xb3\x10\xb5\xb4\a\xaa\t\x18\xd0\\\x88)\x00'/121)
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
ioctl$int_in(r2, 0x73, &(0x7f00000000c0)=0x3)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 5:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r15, r15, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r16})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r16})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r17, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
write(r18, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r18, 0x4b6b, &(0x7f0000001780))
fchdir(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r17, @ANYRESHEX=r18, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000001b15275780c804d3000004000059b200000010dfffffff0000002000000000000020b4eecd26ada43ab529e19fd613c39560844a4eb54906410cc210e3f4d05a1f1df46bf21f1937ab5856eba4464e3069c2a25ccaf0caa40417c4305d8831a2aea946d62ea12b20c33e4c8f3fce967b7e30e6e87d9d8c4593490b2684435aac6d498960196414bbb42cd50f6627a6db6918b868458cff2936186b216168d03669c89f65df0a298ec09fbaa0b33449f48dfc2ac2ff6fc24d7abeb91e665acf19c989df39b8360877768ef5a5da719e1e2bd7215066c980ea2adb000000000000000000"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r3, 0x0)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x2, 0x1c, 0x4})
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x4}, 0xf)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000640), 0xc, &(0x7f0000000840)={0x0}}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xc004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r2, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r4 = dup(r3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r4, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000b600100000000000000020000000000000008bc7c5e1615b7bd3ade57a3e94426c40b623a770e96b991a4106f3a2a87527ade248acb5dcbcfbbbe377c19e06dd9a570a9a9f5fb23f68a529bb3d03bb908627b9a6cbcc25a3955100c49b359d8f4ce8772e205be2782a10b38ccd"], 0x24, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r5)
fcntl$setsig(r5, 0xa, 0x25)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0)
getsockname$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:15:49 executing program 0:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

23:15:49 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000})
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fcntl$getflags(0xffffffffffffffff, 0x401)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
write$P9_RSTATu(r3, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
clock_getres(0x4, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r9})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r9})
bind$packet(r6, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14)
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r10)
fcntl$setsig(r10, 0xa, 0x25)
r11 = dup3(0xffffffffffffffff, r10, 0x0)
ioctl$EVIOCGNAME(r11, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r11, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r12, 0x4, 0x6100)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r14 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r14, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r15})
lseek(r12, 0x0, 0x2)
sendfile(r12, r13, 0x0, 0xfffffffffffffffc)
sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe)
r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r16, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write(r17, &(0x7f00000001c0), 0xfffffef3)
ioctl$GIO_FONTX(r17, 0x4b6b, &(0x7f0000001780))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r17, 0x0)
r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r18)
fcntl$setsig(r18, 0xa, 0x25)
r19 = dup3(0xffffffffffffffff, r18, 0x0)
ioctl$EVIOCGNAME(r19, 0x80404506, &(0x7f0000001800)=""/151)
sendto(r19, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r20 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0)
ioctl$PPPIOCGNPMODE(r20, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1})
r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r21, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r12, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=r16, @ANYRESHEX=r17, @ANYRES32=r19, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=r20]], &(0x7f0000000140)=0x8)
write$binfmt_script(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r4, 0xfffff000)

[  748.326297] ------------[ cut here ]------------
[  748.332239] WARNING: CPU: 0 PID: 5838 at mm/gup.c:388 __get_user_pages+0xae7/0xfd0()
[  748.342361] Kernel panic - not syncing: panic_on_warn set ...
[  748.342361] 
[  748.349755] CPU: 0 PID: 5838 Comm: syz-executor.1 Not tainted 4.4.174+ #17
[  748.356768]  0000000000000000 9e5cf5919179ac2f ffff8800ba0a7818 ffffffff81aad1a1
[  748.364842]  0000000000000000 ffffffff82835ee0 ffffffff82892ea0 0000000000000184
[  748.372918]  ffffffff8142cb27 ffff8800ba0a78f8 ffffffff813a48c2 0000000041b58ab3
[  748.381016] Call Trace:
[  748.383605]  [<ffffffff81aad1a1>] dump_stack+0xc1/0x120
[  748.388981]  [<ffffffff8142cb27>] ? __get_user_pages+0xae7/0xfd0
[  748.395147]  [<ffffffff813a48c2>] panic+0x1b9/0x37b
[  748.400170]  [<ffffffff813a4709>] ? add_taint.cold+0x16/0x16
[  748.405977]  [<ffffffff813a4a9e>] ? warn_slowpath_common.cold+0x5/0x20
[  748.412655]  [<ffffffff813a4ab9>] warn_slowpath_common.cold+0x20/0x20
[  748.419241]  [<ffffffff810d3aaa>] warn_slowpath_null+0x2a/0x30
[  748.425215]  [<ffffffff8142cb27>] __get_user_pages+0xae7/0xfd0
[  748.431197]  [<ffffffff8142c040>] ? follow_page_mask+0x10d0/0x10d0
[  748.437529]  [<ffffffff8142edd9>] ? __access_remote_vm+0xc9/0x3c0
[  748.443769]  [<ffffffff8142d73d>] get_user_pages+0x6d/0x90
[  748.449400]  [<ffffffff8142eef3>] __access_remote_vm+0x1e3/0x3c0
[  748.455553]  [<ffffffff8142ed10>] ? do_page_mkwrite+0x360/0x360
[  748.461616]  [<ffffffff810aaaff>] ? __do_page_fault+0x33f/0x7f0
[  748.467681]  [<ffffffff827197a6>] ? retint_kernel+0x2d/0x2d
[  748.473399]  [<ffffffff81435a16>] access_remote_vm+0x36/0x50
[  748.479209]  [<ffffffff815eaf68>] mem_rw.isra.0+0x178/0x320
[  748.484933]  [<ffffffff815eb165>] mem_write+0x55/0x70
[  748.490134]  [<ffffffff81496916>] __vfs_write+0x116/0x3d0
[  748.495684]  [<ffffffff815eb110>] ? mem_rw.isra.0+0x320/0x320
[  748.501580]  [<ffffffff81496800>] ? __vfs_read+0x3c0/0x3c0
[  748.507211]  [<ffffffff81b0abec>] ? check_preemption_disabled+0x3c/0x200
[  748.514057]  [<ffffffff81b0abec>] ? check_preemption_disabled+0x3c/0x200
[  748.520906]  [<ffffffff8123a98b>] ? rcu_read_lock_sched_held+0x10b/0x130
[  748.527760]  [<ffffffff8123b043>] ? rcu_sync_lockdep_assert+0x73/0xb0
[  748.534351]  [<ffffffff8149e9cf>] ? __sb_start_write+0x14f/0x310
[  748.540502]  [<ffffffff81498612>] vfs_write+0x182/0x4e0
[  748.545874]  [<ffffffff8149ac4c>] SyS_write+0xdc/0x1c0
[  748.551157]  [<ffffffff8149ab70>] ? SyS_read+0x1c0/0x1c0
[  748.556613]  [<ffffffff81005de6>] ? do_fast_syscall_32+0xd6/0xa90
[  748.562852]  [<ffffffff8149ab70>] ? SyS_read+0x1c0/0x1c0
[  748.568317]  [<ffffffff8100603d>] do_fast_syscall_32+0x32d/0xa90
[  748.574474]  [<ffffffff8271a350>] sysenter_flags_fixed+0xd/0x1a
[  748.581142] Kernel Offset: disabled
[  748.584913] Rebooting in 86400 seconds..