[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.016207] audit: type=1800 audit(1541884352.078:25): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.035527] audit: type=1800 audit(1541884352.078:26): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.054938] audit: type=1800 audit(1541884352.098:27): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2018/11/10 21:12:44 fuzzer started 2018/11/10 21:12:49 dialing manager at 10.128.0.26:36043 syzkaller login: [ 82.836815] ld (6666) used greatest stack depth: 53224 bytes left 2018/11/10 21:12:49 syscalls: 1 2018/11/10 21:12:49 code coverage: enabled 2018/11/10 21:12:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/10 21:12:49 setuid sandbox: enabled 2018/11/10 21:12:49 namespace sandbox: enabled 2018/11/10 21:12:49 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/10 21:12:49 fault injection: enabled 2018/11/10 21:12:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/10 21:12:49 net packed injection: enabled 2018/11/10 21:12:49 net device setup: enabled 21:15:39 executing program 0: [ 253.643130] IPVS: ftp: loaded support on port[0] = 21 [ 256.079160] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.085823] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.094685] device bridge_slave_0 entered promiscuous mode [ 256.237715] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.244512] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.253333] device bridge_slave_1 entered promiscuous mode [ 256.394830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.536769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.976699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.122451] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:15:44 executing program 1: [ 257.517378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.524607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.090541] IPVS: ftp: loaded support on port[0] = 21 [ 258.337264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.345764] team0: Port device team_slave_0 added [ 258.565953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.574230] team0: Port device team_slave_1 added [ 258.873565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.881337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.890502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.137663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.144814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.153852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.344535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.352367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.361374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.555683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.563437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.572642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.775836] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.782521] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.791069] device bridge_slave_0 entered promiscuous mode [ 261.996472] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.003196] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.011962] device bridge_slave_1 entered promiscuous mode [ 262.022019] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.028495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.035583] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.042126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.050803] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.149570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 262.284834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.722605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.823908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.079362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.248209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 263.255431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.477946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.485428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:15:50 executing program 2: [ 264.456243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.464702] team0: Port device team_slave_0 added [ 264.529306] IPVS: ftp: loaded support on port[0] = 21 [ 264.796357] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.804813] team0: Port device team_slave_1 added [ 265.126764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 265.133982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.142950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.462160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 265.469289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.478238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.801421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.809283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.818556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.088888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.097104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.106415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.387020] ip (6910) used greatest stack depth: 53216 bytes left [ 269.244892] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.251377] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.260256] device bridge_slave_0 entered promiscuous mode [ 269.475806] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.482383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.489354] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.495946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.504669] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.529060] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.535625] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.544325] device bridge_slave_1 entered promiscuous mode [ 269.840040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.923287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.164492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 271.102897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 271.315942] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:15:58 executing program 3: [ 271.692113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 271.699162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.015508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 272.022646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.790198] IPVS: ftp: loaded support on port[0] = 21 [ 273.108989] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.117447] team0: Port device team_slave_0 added [ 273.526828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.535145] team0: Port device team_slave_1 added [ 273.880255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.887505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.896503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.059411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.200211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 274.207547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.216420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.582396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.590005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.599118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.960949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.969369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.978450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.448430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.707698] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.714218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.722452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.064218] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.451020] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.457637] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.466508] device bridge_slave_0 entered promiscuous mode [ 278.810541] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.817201] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.825998] device bridge_slave_1 entered promiscuous mode [ 278.839360] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.845899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.852983] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.859461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.868229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 279.203424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 279.586822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 279.842476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.700999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 281.017197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 281.387968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 281.395188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.715388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.722623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.793353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.801497] team0: Port device team_slave_0 added [ 283.142996] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.151143] team0: Port device team_slave_1 added 21:16:10 executing program 4: [ 283.589141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 283.596338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.605335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.041950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.049047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.057990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.401073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 284.408856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.418213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.579569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.728630] IPVS: ftp: loaded support on port[0] = 21 [ 284.967673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.975488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.984806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.224007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 21:16:13 executing program 0: 21:16:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x1, 0x7, 0x5b7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/10) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="de75e1fe912d0000b21401765ba0017995103a08917fc2a1e9", 0x19) 21:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"65716c00000800000002000000000008", 0x808}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 21:16:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffff7}) r1 = syz_open_pts(r0, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) r2 = memfd_create(&(0x7f0000000080)='/dev/ptmx\x00', 0x3) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x3}) [ 288.014068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 288.020449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.028486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:16:15 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0x24e}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={r1, 0x167, "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"}, &(0x7f0000000400)=0xfebb) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'nat\x00'}, &(0x7f00000003c0)=0x78) open(&(0x7f0000000040)='./file1\x00', 0x8043, 0x34) creat(&(0x7f0000000080)='./file0\x00', 0x150) syz_emit_ethernet(0x16f, &(0x7f00000001c0)={@empty, @link_local, [{[], {0x8100, 0x7, 0xffff, 0x1}}], {@ipv4={0x800, {{0x1d, 0x4, 0x3, 0x3f, 0x15d, 0x67, 0x3ff, 0x3, 0x33, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0xc, 0x4, 0x3, 0x4, [{[@dev={0xac, 0x14, 0x14, 0x19}]}]}, @cipso={0x86, 0x23, 0x51c7, [{0x7, 0x9, "e28d067868bf50"}, {0x0, 0x5, "74d73e"}, {0x0, 0x2}, {0x7, 0x6, "61fb05f1"}, {0x6, 0x7, "ffdde20aa2"}]}, @end, @timestamp={0x44, 0xc, 0xf63, 0x3, 0x5, [{[@remote], 0x1}]}, @end, @timestamp={0x44, 0x20, 0x19a9, 0x3, 0x7, [{[@remote], 0xff}, {[], 0x5}, {[@local], 0x5}, {[@remote], 0x100}]}, @noop]}}, @udp={0x4e22, 0x4e24, 0xe9, 0x0, [@guehdr={0x1, 0x13, 0x8, 0x6, 0x100}, @guehdr={0x1, 0x5, 0x2, 0x400000000000000, 0x100}, @guehdr={0x2, 0x40, 0x100000000, 0x1, 0x100, [0x80]}, @guehdr={0x1, 0x8, 0x7, 0x800, 0x100}], "938a6c39c5d34a2c1f6b3fd24d7ee1f9571d78722a7916de97955b9e54a36b8b57657508a60cae509e23813926b05e1d1d3cb6b6d4e1c9563fd147a12021a53400870837d9e428b74d03130b3f4e0d745d60d8d2c6ea1b810dda47dbb99fc0fda544ba46026bf12cfb399e79834afe2581c60ab6a1384433e9d5f72f76be9a3f628fdcdfa3d8978a557b3d44663e3320cd831dad0f92cd9f1efe4e7ce1dcc2bab139df6aee0f2d009e53d0f49a68da1aebd95ab32c9f602f755bf21c2e7b88147cec19b133ca4da21ff9def288"}}}}}, &(0x7f0000000440)={0x0, 0x3, [0x189, 0xea1, 0xc24, 0x903]}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 21:16:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0xc00000, 0x2, 0x6, 0x0, 0x81}, 0x14) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4c0201, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000000c0)=0x5c09a95f) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) 21:16:16 executing program 0: r0 = memfd_create(&(0x7f0000000180)='(\'\x00', 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x6) fsetxattr(r0, &(0x7f0000000940)=@known='system.posix_acl_access\x00', &(0x7f00000009c0)='(wlan1\x00', 0x7, 0x1388e5b0a0027c70) clock_adjtime(0x0, &(0x7f00000004c0)={0x6, 0x2, 0x8, 0x200, 0x1, 0x6, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x8, 0x8000, 0xf4, 0x80000001, 0x0, 0x100, 0x3f, 0x200, 0x5, 0x4, 0x400, 0x1, 0x0, 0x40, 0xffffffff, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1004}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x1c, 0x1, @ib={0x1b, 0x6, 0x9, {"52ffbeb44c875db31a5ade492d9fba6a"}, 0x9, 0x4, 0x4}}}, 0xa0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)=""/189, &(0x7f0000000300)=0xbd) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000001c0)=0xffffffffffffff01) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000005c0)={0xa, 0x7, 0x8, 0xffffffffffffffff, 'syz0\x00', 0x9}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000600)={0x20, 0x2ce, [], {0x0, @bt={0x0, 0x1, 0x1, 0x2, 0x8, 0x2, 0x8, 0x9b60, 0x8001, 0xfc5, 0xe89c, 0xfff, 0x401, 0x4, 0x1a, 0x10}}}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x4, &(0x7f0000000200)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000480)={r2, 0x4, &(0x7f0000000380)=[0x200, 0x0, 0x0, 0xea], &(0x7f00000003c0)=[0x9, 0x6, 0x6], 0x1, 0x3, 0x6, &(0x7f0000000400)=[0x5, 0x101, 0x80000001], &(0x7f0000000440)=[0x25e, 0x4, 0x100000001, 0x6, 0x10000, 0x90, 0x3ff]}) [ 289.730928] 8021q: adding VLAN 0 to HW filter on device team0 21:16:17 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400801, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x9}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0xa8201, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000180), 0x2) [ 289.976176] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.982759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.989697] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.996328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.005299] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.882465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.658212] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.664880] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.673635] device bridge_slave_0 entered promiscuous mode [ 292.026023] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.032601] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.041173] device bridge_slave_1 entered promiscuous mode [ 292.371121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 292.791997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 293.827052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.212402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 294.593316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 294.600396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.916346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 294.923613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.165963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.935619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 295.944198] team0: Port device team_slave_0 added [ 296.286721] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 296.295208] team0: Port device team_slave_1 added [ 296.461341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.547770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 296.554966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.563897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.910689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 296.917830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.926744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.194748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 297.202778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.211766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.446997] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 297.453623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.461387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.489914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 297.497593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.506981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 21:16:24 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000000)) setxattr$security_smack_entry(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.SMACK64MMAP\x00', &(0x7f0000000480)="59b21a66090b3aedc8c196aac94c61ab86a030876e1d814a3a101e8d0105eacce9447b84d2779f707bd32cb00705143106400bfb64606638951c69de06c85f6a7d2a204e9ce84867d4fe3afb9a15277c5ab7c649082768512fa5801b4630f743164a53b8430f8d7fc24ecffab338172ebddf196be9", 0x75, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x8000000000085a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)="59b21a66090b3aedc8c196aac94c61ab86a030876e1d814a3a101e8d0105eacce9447b84d2779f707bd32cb00705143106400bfb64606638951c69de06c85f6a7d2a204e9ce84867d4fe3afb9a15277c5ab7c649082768512fa5801b4630f743164a53b8430f8d7fc24ecffab338172ebddf196be9", 0x81062, &(0x7f0000000440)) [ 298.635058] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.106068] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.112644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.119596] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.126219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.134998] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 300.141722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.024147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.867170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 21:16:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="33623c69b4131cfcfcf1e74098f20133af6d4b85a5f52412db21b67583d2f5c49a7abdec7f07db84", 0x28, 0x0, 0x0, 0x0) [ 303.739511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 303.746032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.754019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.322230] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.281334] 8021q: adding VLAN 0 to HW filter on device bond0 21:16:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000540), 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 307.846577] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.138999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.145380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.153520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.565992] 8021q: adding VLAN 0 to HW filter on device team0 21:16:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:16:37 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x8a) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000080)={@ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x109040) write$evdev(r1, &(0x7f0000000180)=[{{}, 0x1, 0x7f}], 0x240) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x22}) 21:16:37 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0xe2, 0x4, [0x81]}) unshare(0x8000000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x3ff, 0xffffffff80000000}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x80000) fadvise64(r3, 0x0, 0xf4, 0x3) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x7}, 0x56}}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000200)='@\x00'}, 0x30) fcntl$setown(r3, 0x8, r4) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000280)='@\x00') read(r2, &(0x7f00000002c0)=""/94, 0x5e) fcntl$setownex(r0, 0xf, &(0x7f0000000340)={0x2, r4}) ioctl$sock_proto_private(r1, 0x89ef, &(0x7f0000000380)="10e7019456d9dab3b1c80a8089b0c38bd24c6ba1c3f99d52e0e8bdb0d98da4bb87b1e51d13e52bf2717cd7917ffaf456706ac9a9533418a65665cb208161f996b98304f7735466bda114440710ce6be2fafb7eb5e13708b3a59effd7a67ad77755dadd9ebf7f25724b0c96e341b3cf4cde404c8951a3739a9fecf70c353741d146e59ea41d6946e9fdb348ff253a1eb804070c46fefb59d541a3aba09dac90c0328ef35668e260a4739e9d6ff4cba47308a02dd777de861edbbedda9f7e431a00e4b4e3d619339fad89e286f381765c740fca8ffc41d61079d2eae7a2f07f99720dfcf05bf118e") ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000480)=""/4096) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000001480)={0x8001007, 0x9, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in6={{0xa, 0x4e21, 0x7f, @ipv4={[], [], @remote}, 0x2ef0a283}}, 0xfffffffffffffffd, 0x31, 0x7, 0x8000, 0x8}, &(0x7f0000001580)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000015c0)={r5, 0x869}, &(0x7f0000001600)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000016c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001680)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001700)={0x10, 0x30, 0xfa00, {&(0x7f0000001640), 0x0, {0xa, 0x4e23, 0x8, @local, 0x9}, r6}}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) bind$vsock_dgram(r2, &(0x7f0000001740)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) setxattr$security_ima(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='security.ima\x00', &(0x7f0000001800)=@sha1={0x1, "855d37081a4f2e2b99545ce024ad15241fccba38"}, 0x15, 0x1) syz_open_dev$mice(&(0x7f0000001840)='/dev/input/mice\x00', 0x0, 0x200) 21:16:37 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 21:16:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 21:16:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) close(r0) [ 310.637817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.644714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:16:37 executing program 2: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) unshare(0x400) r0 = timerfd_create(0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 21:16:37 executing program 3: clock_adjtime(0x0, &(0x7f0000000340)) 21:16:38 executing program 4: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1c5102) [ 311.053761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:16:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 21:16:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 21:16:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 21:16:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 21:16:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x89}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) [ 312.098889] IPVS: ftp: loaded support on port[0] = 21 [ 313.454852] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.461287] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.469942] device bridge_slave_0 entered promiscuous mode [ 313.551930] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.558353] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.566439] device bridge_slave_1 entered promiscuous mode [ 313.642945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 313.718741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 313.952183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 314.034439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 314.113798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 314.120753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.197843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 314.204984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.441308] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 314.449032] team0: Port device team_slave_0 added [ 314.526210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 314.533935] team0: Port device team_slave_1 added [ 314.611083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.691509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.770104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 314.777588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.786713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.858617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 314.865980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.875039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.736247] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.742734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.749483] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.756035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.764880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 316.103384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.900790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.257185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.599814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 319.606240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.614356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.901396] 8021q: adding VLAN 0 to HW filter on device team0 21:16:49 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000001600)=@sr0='/dev/sr0\x00', &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='cgroup\x00', 0x0, &(0x7f00000016c0)='configfs\x00') 21:16:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x89}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 21:16:49 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000280)) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mlockall(0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/188, 0xbc, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000200)=[&(0x7f0000000100)='self(@&&]^posix_acl_access.\x00', &(0x7f0000000140)='user.user\x00'], 0x1000) 21:16:49 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="1b0000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180", 0x1b) recvfrom$packet(r0, &(0x7f0000000100)=""/20, 0x14, 0x0, 0x0, 0x0) 21:16:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local}, {0x0, @remote}, 0x1c, {0x2, 0x0, @multicast2}, "0000000000060000000000004000"}) 21:16:49 executing program 1: 21:16:49 executing program 2: syslog(0x2, &(0x7f00000005c0)=""/177, 0xb1) 21:16:49 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0), 0x2c) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000300)=ANY=[]) 21:16:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xffff) socket$inet6(0xa, 0x0, 0xe8) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0), 0x399) r2 = open(&(0x7f0000000000)='./bus\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 21:16:49 executing program 1: r0 = inotify_init1(0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 21:16:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @rand_addr}}, 0x20) 21:16:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x1) [ 322.753819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:16:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x41132}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@broadcast]}) 21:16:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 21:16:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$UHID_INPUT2(r0, &(0x7f0000000240), 0x6) creat(&(0x7f0000000140)='./bus\x00', 0x0) 21:16:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r3 = getpgid(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 21:16:50 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) dup2(r1, r0) 21:16:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/34, 0x22}], 0x1) 21:16:50 executing program 5: r0 = getpid() waitid(0x2, r0, &(0x7f0000000200), 0x9, &(0x7f0000000240)) 21:16:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x100000080000000) 21:16:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES64], 0x3) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000005180)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000005100)=""/74, 0x4a, 0x0, 0x6, 0x0, 0x200, 0xac05}, 0x120) 21:16:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:16:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "e2b89ba6a0b821a7fac1f178a6ff528d79c72489c384e5c175747d5d32f186ca57bdb292d7455440c655551aa9a75e80642059ca0ae1af57d286a208159815bc", "a4b5c45c542ff9a6f164714d10b3815a8c3111300ddc3787a4b8214e7dd72302"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:16:51 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:cron_spool_t:s0\x00', 0xffffff52) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x8000) chmod(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x0, 0x4) write$P9_RWALK(r0, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x0, 0x8}]}}, 0x16) 21:16:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x1031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic) 21:16:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x258, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f000000bf00)=[{{&(0x7f0000004b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000005240), 0x0, &(0x7f00000052c0)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 21:16:51 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x6}]}) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/208, 0xd0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'irlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@delneigh={0x1c, 0x1d, 0x0, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, 0x2, 0x0, 0xb}}, 0x1c}}, 0x0) capget(&(0x7f0000000280), &(0x7f0000000040)={0x0, 0x0, 0xf126, 0x0, 0x1, 0x3c}) 21:16:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x100000080000000) 21:16:51 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 324.516604] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.598569] kauditd_printk_skb: 3 callbacks suppressed [ 324.598609] audit: type=1326 audit(1541884611.658:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8438 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 21:16:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x1031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic) 21:16:51 executing program 1: 21:16:51 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 21:16:51 executing program 2: 21:16:52 executing program 5: 21:16:52 executing program 1: [ 325.229599] audit: type=1326 audit(1541884612.288:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8438 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 21:16:52 executing program 4: 21:16:52 executing program 2: 21:16:52 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 21:16:52 executing program 5: 21:16:52 executing program 3: 21:16:52 executing program 1: 21:16:52 executing program 2: 21:16:52 executing program 4: 21:16:53 executing program 5: 21:16:53 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 21:16:53 executing program 1: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x824ca0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) 21:16:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$uid(0x3, 0x0, 0x0) 21:16:53 executing program 2: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x824ca0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) 21:16:53 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:16:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x100000001}}) 21:16:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x812) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xfd54) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 21:16:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) 21:16:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 21:16:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000007400)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000006f00), 0x0, &(0x7f0000006f40)=[{0xc, 0x1}], 0xc}}], 0x1, 0x20000000) 21:16:54 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) 21:16:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x9, &(0x7f0000000080)=0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r3, 0x400048204) io_submit(r2, 0x1, &(0x7f0000000980)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280), 0x0, 0x800}]) [ 327.271693] hrtimer: interrupt took 262029 ns 21:16:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)={&(0x7f0000000780)='./file0\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000540)='cpuset.memory_pressure\x00', 0x0, 0x0) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) socket$kcm(0x11, 0x0, 0x300) socketpair(0x0, 0x400a, 0x0, &(0x7f0000000240)) sendmsg$kcm(r3, &(0x7f0000000680)={&(0x7f00000004c0)=@nl, 0x80, &(0x7f0000003cc0)}, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r4, &(0x7f0000000000), 0x12) 21:16:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 21:16:54 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000580)="7b5aa60acc88c08616733e70363856ede11e206a4b96d78ee276a11ae5e6f50ffcb759a388ffd05db6fd28f3ce796952fdf350273514743ff2c0ba06775532a146ebd4f4b5145717349e424c127d26a3facb75c7d0cab4585392597655f56cb9287374d2ae9d0c99d64dd24049cfd2e5329dc672bd78ba3ec3df635b6b148bb9dba456aef169352247503b247496c609af0d31a99db27980aa8de80480da12bf8720aca1e7e2ae0624a8ae60a33f7b4d7400b4ec5a17039439f0fb8f4af94a5b7dec6deb9f685384d0c81ea03f5a3b8e998671149a859b7859637504b283adc687006ef7118d619274c5dba11e81a1d2fb030533501904484e30ad1c57be7489dc4471aae0a8765e67a8b3e9bf1960f84c32c0da7437eb743a5e5f4ec7318f132e3992af170253c13e4d6fece04dd5bae1fef171796db16d566e47a4691ac13a75370ce8cc1370b7d6a4aee09d97a437fc4c7c2f341e3761d3db0ef4ec4d9c829a6e9bf2ae18e65f3163d5055f0f68f816f88ef27ccbd1c696c4d5b41528fe54bcdfeba85f7ea6d05691c6930a476ad4a9d7352ec2da80e52e716d7b3f61fc9fed452c9831b1b245ae6c6bdaa3ffaaae38950747ec6acf69175ead5c88931206ff941b9a829e6752b5ffe80cc1cf83eb33ecaee7298a45cbb1b6466f34edf1a1d7feb4d5180bf10eeafb60640b4ae8c02469ad00c69afda62824921e7095796a", 0x200, 0x0) fcntl$setstatus(r0, 0x4, 0x4401) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)='\x00', 0xfffffffffffffffa) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 327.523755] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! 21:16:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 21:16:54 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:16:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 21:16:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x812) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xfd54) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 21:16:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:16:55 executing program 0: getrandom(&(0x7f0000000180)=""/140, 0x8c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x100000080000000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000480), 0x286, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCSBRK(r3, 0x5427) 21:16:55 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x8003f1) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000ffffffff"]) 21:16:55 executing program 5: 21:16:56 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:16:56 executing program 5: 21:16:56 executing program 0: getrandom(&(0x7f0000000180)=""/140, 0x8c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x100000080000000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000480), 0x286, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCSBRK(r3, 0x5427) 21:16:56 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000580)="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", 0x200, 0x0) fcntl$setstatus(r0, 0x4, 0x4401) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)='\x00', 0xfffffffffffffffa) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 21:16:56 executing program 5: 21:16:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x812) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xfd54) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 330.770739] syz-executor3 (8564) used greatest stack depth: 52960 bytes left 21:16:58 executing program 3: socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ustat(0x6, &(0x7f0000000080)) 21:16:58 executing program 5: 21:16:58 executing program 0: 21:16:58 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:16:58 executing program 1: 21:16:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32]], 0x4451417f) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) fsync(r1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000440)=0x80040) 21:16:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setfsgid(0x0) 21:16:58 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x122) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 21:16:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81002c00000d040000201002000094ff1fbc218579382b50131df405f6cc517528be634a8ff5464836f48684f0f3f5b14790341b88e4a8c0f8f7d495971aa758c65c760583d51426a8fbc701b9c2"], &(0x7f0000000000)={0x0, 0x2, [0x43c, 0x253, 0x44c, 0x75a]}) 21:16:58 executing program 5: socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) process_vm_readv(r1, &(0x7f00000001c0), 0x0, &(0x7f0000001380), 0x0, 0x0) 21:16:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xfffffffffffffec8}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:16:58 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0xfffffffffffffffe) ftruncate(r0, 0x0) 21:16:58 executing program 2: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x77) 21:16:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) uname(&(0x7f0000001980)=""/191) 21:16:59 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:16:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x0) 21:16:59 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x122) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 21:16:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x20000000013, &(0x7f0000000000), 0x4) 21:16:59 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000400)) 21:16:59 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000040)) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:00 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000400), 0x4) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 21:17:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x40000a9, 0x0) 21:17:00 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{}, {}, {0x0, 0x7f}]}}) 21:17:01 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:01 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @sliced}) 21:17:01 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)) 21:17:01 executing program 5: 21:17:01 executing program 3: 21:17:01 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:06 executing program 3: 21:17:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)) 21:17:06 executing program 1: 21:17:06 executing program 5: 21:17:06 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:06 executing program 0: 21:17:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001300)='gid_map\x00') 21:17:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 21:17:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) 21:17:07 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x6) 21:17:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x21) 21:17:07 executing program 3: 21:17:07 executing program 1: 21:17:07 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:07 executing program 2: 21:17:07 executing program 0: 21:17:07 executing program 5: 21:17:07 executing program 3: 21:17:08 executing program 5: 21:17:08 executing program 1: 21:17:08 executing program 2: 21:17:08 executing program 0: 21:17:08 executing program 3: 21:17:08 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:08 executing program 1: 21:17:08 executing program 2: 21:17:08 executing program 5: 21:17:08 executing program 0: 21:17:08 executing program 3: 21:17:09 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:09 executing program 2: 21:17:09 executing program 1: 21:17:09 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040), 0x80000003) 21:17:09 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 21:17:09 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031d0020200a0009000500031d85680c1ba3a20400ff7e000000000000", 0x24}], 0x1}, 0x0) 21:17:09 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x67e, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x80000005, 0x4) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendto$inet(r0, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 21:17:09 executing program 2: 21:17:09 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) [ 342.537205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 21:17:09 executing program 0: 21:17:09 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x1}, &(0x7f0000000080)='syz', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) 21:17:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) sendfile(r0, r0, &(0x7f0000000000), 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 21:17:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0xffffffff00000001) 21:17:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000380)={'sy.', 0x3}, &(0x7f0000000100)="74727573746564766d6e65743083267d2d766d6e6574316d643573756d40096b657972696e676d643573756d6c6f00", 0x0) 21:17:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f00000005c0), 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x1}, &(0x7f0000000080)='syz', 0xffffffffffffffff) 21:17:10 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:10 executing program 2: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/current\x00') pwrite64(r0, &(0x7f0000000440), 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x2b7}, 0x18) open$dir(&(0x7f0000000000)='./file0\x00', 0x202, 0x0) 21:17:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x20000000) setpriority(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='trustedbdev\x00', 0x0) unshare(0x24020400) 21:17:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0), 0x399) r2 = open(&(0x7f0000000000)='./bus\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 21:17:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x0, &(0x7f0000000040)=@raw, &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) 21:17:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007340)=[{{&(0x7f0000000800)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000014c0)=[{0x10}], 0x10}}], 0x1, 0x0) 21:17:14 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map={0x18, 0x2}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) 21:17:14 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) [ 347.545147] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:17:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) write$tun(r0, &(0x7f0000000580)={@val, @void, @x25}, 0x7) 21:17:14 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setgid(0x0) 21:17:15 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) 21:17:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x20000000) setpriority(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='trustedbdev\x00', 0x0) unshare(0x24020400) 21:17:15 executing program 4: close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7}, 0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32]], 0x4451417f) fsync(r1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x556a0fdf, 0x3}}, 0x30) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000440)=0x80040) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20010080) 21:17:15 executing program 3: clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) setfsuid(0x0) 21:17:15 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/154) 21:17:15 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r0, 0xa, 0x12) fcntl$setownex(r0, 0xf, &(0x7f0000704000)) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000b30000)}, 0x0) dup2(0xffffffffffffffff, r1) tkill(0x0, 0x15) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) 21:17:15 executing program 4: close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:15 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)=r2) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000008c0)=@in={0x2, 0x0, @loopback, [0x5]}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f00000000c0)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0x100000261) bpf$MAP_CREATE(0x0, &(0x7f0000000400), 0x2c) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) 21:17:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 21:17:16 executing program 4: close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:16 executing program 5: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000680)="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") 21:17:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/net/tun\x00', 0x408, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) recvmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x3, &(0x7f0000001840)=""/33, 0x21}, 0x0) close(0xffffffffffffffff) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r5) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6e65742f73797a31eb", 0x1ff) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)={&(0x7f0000001900)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r6, 0x2e9, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000018c0)='memory.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x100010000000006, 0x0) sendmsg$kcm(r10, &(0x7f0000000c40)={&(0x7f00000008c0)=@in={0x2, 0x0, @loopback, [0x5]}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f00000000c0)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r7, 0x9, 0x18}, 0x100000261) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400}, 0x2c) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000001940)=r9) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) 21:17:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 21:17:16 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000003540)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)="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", 0x2761, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0xfdd8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) close(r1) 21:17:16 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:16 executing program 1: 21:17:16 executing program 5: 21:17:17 executing program 2: 21:17:17 executing program 1: 21:17:17 executing program 3: 21:17:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:17 executing program 5: 21:17:17 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:18 executing program 0: 21:17:18 executing program 2: 21:17:18 executing program 3: 21:17:18 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:18 executing program 5: 21:17:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:18 executing program 5: 21:17:18 executing program 0: 21:17:18 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:18 executing program 2: 21:17:18 executing program 3: 21:17:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:18 executing program 0: 21:17:18 executing program 5: 21:17:19 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:19 executing program 2: 21:17:19 executing program 3: 21:17:19 executing program 5: 21:17:19 executing program 0: 21:17:19 executing program 2: 21:17:19 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:19 executing program 5: 21:17:19 executing program 3: 21:17:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000001c0)}, 0x2004c084) 21:17:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/52) 21:17:20 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 21:17:20 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x0) 21:17:20 executing program 3: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:17:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001a40)=[{0x10}], 0x10, 0x8002}, 0xc100) 21:17:20 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000100)) 21:17:20 executing program 5: unshare(0x24020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='syscall\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 21:17:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x0) 21:17:20 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000002ec0)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 21:17:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="1212dc235b7fa8d9942f4ebe34e4de1da6f624d8bd11e9d92b7265f25cb47a289de21ffe96a95df97fa377d3639c53117a3ad742ca3177818bc184c443accd31dd4bcf9dbe50058794ce54f13cb11099057a15f93d8e5d47b5e235c14a713366c13da6147fddf7ca5c4f39ebb1e47fdf71f41ebe03c23c62817881c95e95dd5e6341db9116a95df6f2ba94748989f149d4b524eccea3be34e63c5eeb5de65ec178fc53d5347f820bfe1220c7594bb7c816e92c81013cea63", 0xb8}], 0x1, &(0x7f00000004c0)}, 0x4080) 21:17:21 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:21 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000100), 0x10) 21:17:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0xf) [ 354.285611] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 21:17:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x0) 21:17:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="1212dc235b7fa8d9942f4ebe34e4de1da6f624d8bd11e9d92b7265f25cb47a289de21ffe96a95df97fa377d3639c53117a3ad742ca3177818bc184c443accd31dd4bcf9dbe50058794ce54f13cb11099057a15f93d8e5d47b5e235c14a713366c13da6147fddf7ca5c4f39ebb1e47fdf71f41ebe03c23c62817881c95e95dd5e6341db9116a95df6f2ba94748989f149d4b524eccea3be34e63c5eeb5de65ec178fc53d5347f820bfe1220c7594bb7c816e92c81013cea63", 0xb8}], 0x1, &(0x7f00000004c0)}, 0x4080) 21:17:21 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x80) 21:17:21 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:21 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000380)={0x9, 0x101}) 21:17:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r1}], 0x94, 0x0) 21:17:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 21:17:22 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000380)={0x9}) 21:17:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000001600)=""/148, 0x94}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 21:17:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000000a4c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00400000000000ff1710000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:17:22 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 21:17:22 executing program 3: 21:17:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 21:17:22 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:22 executing program 2: 21:17:22 executing program 3: 21:17:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000000a4c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00400000000000ff1710000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:17:22 executing program 0: 21:17:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 21:17:23 executing program 2: 21:17:23 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:23 executing program 0: 21:17:23 executing program 3: 21:17:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:23 executing program 5: 21:17:23 executing program 2: 21:17:23 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:23 executing program 5: 21:17:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:24 executing program 0: 21:17:24 executing program 3: 21:17:24 executing program 2: 21:17:24 executing program 5: 21:17:24 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:24 executing program 0: 21:17:24 executing program 3: 21:17:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:24 executing program 2: 21:17:24 executing program 0: 21:17:24 executing program 5: 21:17:25 executing program 0: 21:17:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:25 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) 21:17:25 executing program 3: 21:17:25 executing program 2: 21:17:25 executing program 5: 21:17:25 executing program 2: 21:17:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x495d}, 0x4) 21:17:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:25 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 21:17:25 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) 21:17:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) 21:17:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) 21:17:26 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 21:17:26 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) 21:17:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x495d}, 0x4) 21:17:26 executing program 2: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18}, 0x18) 21:17:26 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:26 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) 21:17:26 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) 21:17:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r1) r3 = dup2(r0, r2) connect(r3, &(0x7f0000000100)=@nl=@unspec, 0x80) 21:17:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x7f) 21:17:27 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:27 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) syslog(0x0, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 21:17:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000000000000000086dd60093a0600083a00fe8000000000000b00000000000000bbff02000000cd1a518b22dfb236bba42f58943500a400eebdfe415d89dd2c01ac6c5b000000000000"], &(0x7f0000000100)) 21:17:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a00)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xff0a, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x2c, 0x13, 0x311, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) 21:17:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget(0x3, 0x0, 0x204) 21:17:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) 21:17:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 21:17:27 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:27 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) 21:17:28 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) add_key$user(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={'syz'}, &(0x7f00000012c0), 0x0, 0xfffffffffffffff8) syz_emit_ethernet(0x1, &(0x7f00008bbfba)=ANY=[@ANYBLOB="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"], &(0x7f0000775000)) 21:17:28 executing program 5: prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) lseek(0xffffffffffffffff, 0x0, 0x0) 21:17:28 executing program 0: [ 361.173397] audit: type=1326 audit(1541884648.238:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9505 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:28 executing program 2: [ 361.399889] audit: type=1326 audit(1541884648.458:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9514 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:28 executing program 4: 21:17:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:28 executing program 0: 21:17:28 executing program 2: [ 361.778306] audit: type=1326 audit(1541884648.838:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9505 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:28 executing program 4: 21:17:29 executing program 3: 21:17:29 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:29 executing program 2: [ 362.116210] audit: type=1326 audit(1541884649.178:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9514 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:29 executing program 4: 21:17:29 executing program 5: 21:17:29 executing program 0: 21:17:29 executing program 3: 21:17:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:29 executing program 4: 21:17:29 executing program 2: 21:17:29 executing program 0: 21:17:29 executing program 5: 21:17:30 executing program 3: 21:17:30 executing program 2: 21:17:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:30 executing program 5: 21:17:30 executing program 4: 21:17:30 executing program 3: 21:17:30 executing program 0: 21:17:30 executing program 2: 21:17:30 executing program 4: 21:17:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:30 executing program 3: 21:17:30 executing program 5: 21:17:31 executing program 0: 21:17:31 executing program 2: 21:17:31 executing program 4: 21:17:31 executing program 3: 21:17:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:31 executing program 5: 21:17:31 executing program 0: 21:17:31 executing program 2: 21:17:31 executing program 4: 21:17:31 executing program 0: 21:17:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:31 executing program 3: 21:17:32 executing program 5: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x1) sendto$inet(r3, &(0x7f0000002440), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0xa) r4 = dup3(r3, r0, 0x80003) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x800, 0x22}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2000000000002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3797}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockname$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x2c3) sendto$inet(r3, &(0x7f0000d7cfcb), 0xfffffffffffffdc9, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x100000001, 0x0, 0x23}, 0x0, 0x3ff, 0xffffffffffffff80}) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) 21:17:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000040), 0x1000000400000fb) 21:17:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) 21:17:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000540)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') 21:17:32 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local}, 0x1c) 21:17:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:32 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000180)={0x6, 0xffffffffffffff81}) 21:17:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000280)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r1, r0) 21:17:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:17:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) [ 365.882093] input: syz0 as /devices/virtual/input/input6 21:17:33 executing program 3: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 21:17:33 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) rt_sigaction(0x2c, &(0x7f00000000c0)={&(0x7f0000000040)="410f836ac26b6b660f3a22947eeb00000004c401fc2b7709360f7fe93df5000000f240a5c40279bfecf0468743d4c4e279357200c4c14d73fa00", {}, 0x0, &(0x7f0000000080)="c4c1fff0106566430f3a143d6205f035c7f246aec421455d8705000000f0451071ad662641dd66030f8700080000f2d9f46666430fac2206844ff5"}, 0x0, 0x8, &(0x7f0000000140)) [ 366.478923] audit: type=1326 audit(1541884653.538:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9670 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:34 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000180)={0x6, 0xffffffffffffff81}) 21:17:34 executing program 4: clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x0) 21:17:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:34 executing program 5: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x1) sendto$inet(r3, &(0x7f0000002440), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0xa) r4 = dup3(r3, r0, 0x80003) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x800, 0x22}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2000000000002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3797}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockname$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x2c3) sendto$inet(r3, &(0x7f0000d7cfcb), 0xfffffffffffffdc9, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x100000001, 0x0, 0x23}, 0x0, 0x3ff, 0xffffffffffffff80}) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) 21:17:34 executing program 3: clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 367.241153] audit: type=1326 audit(1541884654.298:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9670 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:34 executing program 2: 21:17:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 21:17:34 executing program 3: 21:17:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000), 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x0, 0x2, [@local, @local]}, 0x18) 21:17:35 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local}, 0x1c) 21:17:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:35 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000180)={0x6, 0xffffffffffffff81}) 21:17:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0000020000000000000000000000af4405f8a10a25c5275ec7b43abf2b1984f9b3eb25cf87e203eac7f272f21ec2591cf1779e99a8f3b6d3ad8ec6898470b6c8327101f9461fb312e6fd3dd06f3b35b3f2e8e27f50bbc0c461bfe11047f885621cf61d1680a3877121ce011ac7d5bfc5e996d6a1e49cb0a77299be780f89e01acd8f3ec00ecefcf367134df4f297bfd46f34f870a1b04a0d575a2295240168ef1fad7bdbf719c97b89ad2e6a34ff75abcceb8b3a330169f0d7fa92475f9507"], 0xc1}}, 0x0) close(r0) 21:17:35 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0xa48204) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pread64(r3, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x0, 0xd96, 0x5, 0x8000, 0x0, 0xffffffffffffffff, 0x400}, 0x2c) ioctl$sock_proto_private(r3, 0x0, &(0x7f0000000380)) 21:17:36 executing program 5: 21:17:36 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000180)={0x6, 0xffffffffffffff81}) 21:17:36 executing program 4: 21:17:36 executing program 2: 21:17:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:37 executing program 5: 21:17:37 executing program 4: 21:17:37 executing program 3: 21:17:37 executing program 2: getrandom(&(0x7f0000000180)=""/140, 0x8c, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x100000080000000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140), 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000480), 0x286, 0x0, &(0x7f00008d4fe4)={0xa, 0xfffffffffffffffd, 0x0, @loopback}, 0x1c) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x8, 0x3}, 0x2, 0x10000, 0xfffffffffffffffd}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x3, 0x1, 0xcaf}, 0x8, 0x10000, 'id1\x00', 'timer1\x00', 0x0, 0xaf0, 0x7, 0x6, 0x3f}) ioctl$TIOCSBRK(r4, 0x5427) 21:17:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, 0x0, 0x0) keyctl$set_timeout(0xf, r2, 0x0) 21:17:37 executing program 5: 21:17:37 executing program 4: 21:17:37 executing program 3: 21:17:38 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 21:17:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 21:17:38 executing program 4: 21:17:38 executing program 5: 21:17:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x1, r0}]) 21:17:38 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000100)}) 21:17:38 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1, 0x10400003) 21:17:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000002c0)=0x100) [ 371.560677] binder: 9800:9803 BC_DEAD_BINDER_DONE 0000000000000000 not found 21:17:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) [ 371.612550] binder: 9800:9806 BC_DEAD_BINDER_DONE 0000000000000000 not found 21:17:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:38 executing program 3: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000002480)={'syz'}, &(0x7f00000024c0)="2302", 0xfffffffffffffffe) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() clone(0x2e828903, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8000000000000014) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)) 21:17:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000009f0fc9b31683646eda1eed9e853f5fa0c3795af5d54f12fcaf83eb152fe138c2f5fc80c86537fc5ebbabf1f40233ac67190bdfd495c5c4eeeafc78aeb2c46bda681cd0430e80add3f06e46b2d102057b6b2d7848a844c71ac4142870afd2031d90555bddfad76fc418fdf720ab2eee81652de3a0b1259f696b99e865077a824771d100575d6fd71e73f4e0fd0df2a46643e0b76fd526c325e8"], 0xa1}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)="67faff00", 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000380)='./file1\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)) r5 = perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0xc8, 0x0, 0x0, 0x800, 0x7, 0x17400000000, 0xfff, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x10001, 0xfff, 0x0, 0x7fff, 0x0, 0x9, 0x8, 0x3, 0x85, 0xe67, 0x0, 0x7fa5, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x37bb}, 0x0, 0x10000, 0x800, 0x0, 0x2ea7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x28, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x28, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r6, 0x75d}, 0xffffff93) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x166, &(0x7f00000006c0)}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000a40)) r7 = getpid() r8 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) socketpair(0x19, 0xa, 0xffffffffffffff08, &(0x7f00000009c0)) write$cgroup_pid(r8, &(0x7f00000005c0)=r7, 0xfffffffffffffda9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x1, 0x18}, 0x7) socketpair(0x3, 0x0, 0x3, &(0x7f0000000440)) socketpair(0x8, 0xb, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000900)={r1}) r10 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r10) socket$kcm(0x2, 0x3, 0x2) [ 372.168422] ptrace attach of "/root/syz-executor3"[9821] was attempted by "/root/syz-executor3"[9822] 21:17:39 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:39 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000100)}) 21:17:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 21:17:39 executing program 3: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000002480)={'syz'}, &(0x7f00000024c0)="2302", 0xfffffffffffffffe) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() clone(0x2e828903, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8000000000000014) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)) 21:17:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x0) [ 372.588070] ptrace attach of "/root/syz-executor3"[9839] was attempted by "/root/syz-executor3"[9840] 21:17:39 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086607, 0x7fffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000700)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", r5}, 0xffffffffffffff79) r6 = openat$cgroup_ro(r0, &(0x7f0000000480)='pidc.events\x00', 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)="2e760d30a0", 0x1ff) close(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r6, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) close(r8) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000340)) write$cgroup_int(r8, &(0x7f0000000440)=0x80, 0x12) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xfe6f, 0x0, 0x40, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x97b5, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x6, 0x0, 0x5, 0x9, 0x0, 0x10001, 0x7, 0x77, 0x401, 0x4, 0x0, 0x3fe0000, 0x10001, 0x7ff, 0x8, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x7fff, 0x80000000, 0x0, 0x8000000000000000, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x800, 0x46d, 0xffffffffffffffff, 0x7, 0x7, 0x0, 0xffffffffffffff01}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x80006, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r10, &(0x7f0000000980), 0xffffff4d) close(r10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) 21:17:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:40 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 21:17:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 21:17:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000009f0fc9b31683646eda1eed9e853f5fa0c3795af5d54f12fcaf83eb152fe138c2f5fc80c86537fc5ebbabf1f40233ac67190bdfd495c5c4eeeafc78aeb2c46bda681cd0430e80add3f06e46b2d102057b6b2d7848a844c71ac4142870afd2031d90555bddfad76fc418fdf720ab2eee81652de3a0b1259f696b99e865077a824771d100575d6fd71e73f4e0fd0df2a46643e0b76fd526c325e8"], 0xa1}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)="67faff00", 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000380)='./file1\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)) r5 = perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0xc8, 0x0, 0x0, 0x800, 0x7, 0x17400000000, 0xfff, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x10001, 0xfff, 0x0, 0x7fff, 0x0, 0x9, 0x8, 0x3, 0x85, 0xe67, 0x0, 0x7fa5, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x37bb}, 0x0, 0x10000, 0x800, 0x0, 0x2ea7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x28, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x28, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r6, 0x75d}, 0xffffff93) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x166, &(0x7f00000006c0)}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000a40)) r7 = getpid() r8 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) socketpair(0x19, 0xa, 0xffffffffffffff08, &(0x7f00000009c0)) write$cgroup_pid(r8, &(0x7f00000005c0)=r7, 0xfffffffffffffda9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x1, 0x18}, 0x7) socketpair(0x3, 0x0, 0x3, &(0x7f0000000440)) socketpair(0x8, 0xb, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000900)={r1}) r10 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r10) socket$kcm(0x2, 0x3, 0x2) 21:17:40 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:40 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000009f0fc9b31683646eda1eed9e853f5fa0c3795af5d54f12fcaf83eb152fe138c2f5fc80c86537fc5ebbabf1f40233ac67190bdfd495c5c4eeeafc78aeb2c46bda681cd0430e80add3f06e46b2d102057b6b2d7848a844c71ac4142870afd2031d90555bddfad76fc418fdf720ab2eee81652de3a0b1259f696b99e865077a824771d100575d6fd71e73f4e0fd0df2a46643e0b76fd526c325e8"], 0xa1}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)="67faff00", 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000380)='./file1\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)) r5 = perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0xc8, 0x0, 0x0, 0x800, 0x7, 0x17400000000, 0xfff, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x10001, 0xfff, 0x0, 0x7fff, 0x0, 0x9, 0x8, 0x3, 0x85, 0xe67, 0x0, 0x7fa5, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x37bb}, 0x0, 0x10000, 0x800, 0x0, 0x2ea7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x28, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x28, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r6, 0x75d}, 0xffffff93) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x166, &(0x7f00000006c0)}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000a40)) r7 = getpid() r8 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) socketpair(0x19, 0xa, 0xffffffffffffff08, &(0x7f00000009c0)) write$cgroup_pid(r8, &(0x7f00000005c0)=r7, 0xfffffffffffffda9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x1, 0x18}, 0x7) socketpair(0x3, 0x0, 0x3, &(0x7f0000000440)) socketpair(0x8, 0xb, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000900)={r1}) r10 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r10) socket$kcm(0x2, 0x3, 0x2) 21:17:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340), 0x8) 21:17:41 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086607, 0x7fffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000700)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", r5}, 0xffffffffffffff79) r6 = openat$cgroup_ro(r0, &(0x7f0000000480)='pidc.events\x00', 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)="2e760d30a0", 0x1ff) close(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r6, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) close(r8) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000340)) write$cgroup_int(r8, &(0x7f0000000440)=0x80, 0x12) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xfe6f, 0x0, 0x40, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x97b5, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x6, 0x0, 0x5, 0x9, 0x0, 0x10001, 0x7, 0x77, 0x401, 0x4, 0x0, 0x3fe0000, 0x10001, 0x7ff, 0x8, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x7fff, 0x80000000, 0x0, 0x8000000000000000, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x800, 0x46d, 0xffffffffffffffff, 0x7, 0x7, 0x0, 0xffffffffffffff01}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x80006, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r10, &(0x7f0000000980), 0xffffff4d) close(r10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) 21:17:41 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:41 executing program 3: 21:17:41 executing program 1: 21:17:41 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:42 executing program 4: 21:17:42 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:42 executing program 1: 21:17:42 executing program 3: 21:17:42 executing program 4: 21:17:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:42 executing program 1: 21:17:42 executing program 2: 21:17:42 executing program 3: 21:17:42 executing program 1: 21:17:42 executing program 4: 21:17:43 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:43 executing program 2: 21:17:43 executing program 3: 21:17:43 executing program 1: 21:17:43 executing program 4: 21:17:43 executing program 2: 21:17:43 executing program 1: 21:17:43 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:43 executing program 2: 21:17:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:43 executing program 3: 21:17:44 executing program 4: 21:17:44 executing program 2: 21:17:44 executing program 1: 21:17:44 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:44 executing program 2: 21:17:44 executing program 4: 21:17:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') clock_gettime(0x0, &(0x7f00000003c0)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={r1}, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000ac0), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) 21:17:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x100) 21:17:44 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000000780)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x0, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000780)}, 0x0) 21:17:45 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000004bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005040), 0x0, &(0x7f00000050c0)=""/44, 0x2c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005140)={0x0, 0x5, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xa4, &(0x7f0000000140)=""/164}, 0x48) r1 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 21:17:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 21:17:45 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000600)=""/105) 21:17:45 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000300)="76626f786e65743070726f636370757365747d73797374146d7070703123657468312b00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="e0", 0x1}], 0x1, 0x0) 21:17:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x300000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c00000000eeff000000000002000900400000000000000000000000030006000000000002000000e0000059d8fd57186fe8a00002000100000000000000000200000000030005000000000002000000e00004000000000000000000"], 0x60}}, 0x0) 21:17:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x6dc, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 21:17:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)="078cc9d7f008fa", 0x0) write(r1, &(0x7f00000000c0)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/135, &(0x7f0000000100)=0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2000000000000094}, 0x10) 21:17:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:46 executing program 1: syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) 21:17:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_team\x00'}) 21:17:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 21:17:46 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000180)=r1, 0x2d87b9ca60125fa4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x2, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b]}}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0xe00) 21:17:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10}], 0x10}, 0x0) 21:17:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 21:17:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:47 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4}) [ 380.275346] netlink: 'syz-executor4': attribute type 29 has an invalid length. 21:17:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000280)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r2, r1, 0x0) dup2(r1, r0) [ 380.342001] netlink: 'syz-executor4': attribute type 29 has an invalid length. 21:17:47 executing program 4: [ 380.556860] input: syz0 as /devices/virtual/input/input8 21:17:47 executing program 2: 21:17:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}}, 0x14}}, 0x0) 21:17:48 executing program 1: 21:17:48 executing program 4: 21:17:48 executing program 3: 21:17:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x0, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:48 executing program 2: 21:17:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:48 executing program 1: 21:17:48 executing program 2: 21:17:48 executing program 4: 21:17:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x0, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:48 executing program 3: 21:17:48 executing program 1: 21:17:49 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:49 executing program 2: 21:17:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x8, 0x0, [@generic='\n']}]}, 0x1c}}, 0x0) 21:17:49 executing program 3: 21:17:49 executing program 4: 21:17:49 executing program 1: 21:17:49 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) 21:17:49 executing program 3: 21:17:49 executing program 2: 21:17:49 executing program 1: 21:17:49 executing program 4: 21:17:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:17:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x100}, 0x2c) 21:17:50 executing program 1: 21:17:50 executing program 3: [ 383.050181] netlink: 'syz-executor5': attribute type 3 has an invalid length. 21:17:50 executing program 2: 21:17:50 executing program 4: 21:17:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x100}, 0x2c) 21:17:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:17:50 executing program 1: 21:17:50 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ftruncate(r0, 0x0) 21:17:50 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x0) [ 383.686692] netlink: 'syz-executor5': attribute type 3 has an invalid length. 21:17:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setpriority(0x0, 0x0, 0x0) [ 383.858601] audit: type=1326 audit(1541884670.918:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10187 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x613}, 0x14}}, 0x0) 21:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x100}, 0x2c) 21:17:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 21:17:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() 21:17:51 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000680)) [ 384.262767] netlink: 'syz-executor5': attribute type 3 has an invalid length. 21:17:51 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001500)) 21:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000}, 0x2c) 21:17:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x4, 0x3, [@generic]}]}, 0x18}}, 0x0) [ 384.590316] audit: type=1326 audit(1541884671.648:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10187 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 21:17:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 21:17:51 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x8) [ 384.742942] netlink: 'syz-executor5': attribute type 3 has an invalid length. 21:17:51 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local}, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="b9a2d5b19422", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xf0ffff, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 21:17:52 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000000640)=@hci, &(0x7f00000006c0)=0x80) 21:17:52 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@local, @dev}, &(0x7f0000000080)=0x8) 21:17:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x80000000000001}, [@nested={0x4, 0x3, [@generic]}]}, 0x18}}, 0x0) 21:17:52 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)='/dev/ptmx\x00'}, 0x30) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x249c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) syz_open_pts(r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) flock(0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000005300)) recvmmsg(r3, &(0x7f0000004f00)=[{{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001140)=""/24, 0x18}], 0x1, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}}], 0x1, 0x100, &(0x7f00000051c0)) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r4, 0x6) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r1) recvfrom(r3, &(0x7f0000005200)=""/101, 0x65, 0x0, &(0x7f0000005280)=@ax25={0x3, {"5f1b4f9eb63234"}}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000004cc0)='IPVS\x00') ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000001000), 0xc, &(0x7f00000050c0)={&(0x7f0000005040)={0x14}, 0x14}}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000005380)={0x90}, 0x90) connect(r3, &(0x7f00000012c0)=@nl=@unspec, 0x80) 21:17:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) close(0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000280)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) dup3(r2, r1, 0x0) dup2(0xffffffffffffffff, r0) 21:17:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000280)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:17:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) 21:17:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000}, 0x2c) 21:17:52 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') [ 385.825815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 21:17:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) 21:17:53 executing program 1: 21:17:53 executing program 5: 21:17:53 executing program 3: 21:17:53 executing program 1: 21:17:53 executing program 3: 21:17:53 executing program 2: 21:17:53 executing program 5: 21:17:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000}, 0x2c) 21:17:54 executing program 1: 21:17:54 executing program 3: 21:17:54 executing program 4: 21:17:54 executing program 5: 21:17:54 executing program 2: 21:17:54 executing program 3: 21:17:54 executing program 1: 21:17:54 executing program 4: 21:17:54 executing program 5: 21:17:54 executing program 0: 21:17:54 executing program 2: 21:17:54 executing program 3: 21:17:55 executing program 5: 21:17:55 executing program 0: 21:17:55 executing program 1: 21:17:55 executing program 4: 21:17:55 executing program 2: 21:17:55 executing program 5: 21:17:55 executing program 3: 21:17:55 executing program 1: 21:17:55 executing program 0: 21:17:55 executing program 4: 21:17:55 executing program 2: 21:17:55 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 21:17:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r0) 21:17:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') 21:17:56 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) 21:17:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) io_setup(0x7fff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1}]) 21:17:56 executing program 5: r0 = gettid() clone(0x7ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) exit_group(0x0) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) tkill(r0, 0x6) ptrace(0x10, r0) 21:17:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='cmdline\x00') sendfile(r0, r0, &(0x7f00000000c0), 0x3) 21:17:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 21:17:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, &(0x7f00000000c0), 0xdd) 21:17:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f00000003c0)=[@request_death, @increfs], 0x0, 0x0, &(0x7f0000000400)}) 21:17:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r3) 21:17:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2, 0x1000) [ 389.773046] binder: 10378:10380 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 389.780416] binder: 10378:10380 IncRefs 0 refcount change on invalid ref 0 ret -22 21:17:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_matches\x00') lseek(r0, 0x0, 0x3) 21:17:56 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 21:17:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r1, r2, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) 21:17:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 21:17:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 21:17:57 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000200)=""/159, 0x9f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 21:17:57 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x1, @output={0x0, 0x0, {0x0, 0xff}}}) 21:17:57 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000600)='fuse\x00', 0x20, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}]}}) 21:17:57 executing program 2: r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 21:17:57 executing program 4: socketpair(0x0, 0x1, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8949, &(0x7f0000000080)='ip6tnl0\x00') 21:17:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 21:17:58 executing program 0: socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000380)=0x6) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffff8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/143) 21:17:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:17:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x31a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x48b) write$binfmt_elf64(r0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0xb75) 21:17:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r1, r2, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) 21:17:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 21:17:58 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdad}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 21:17:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 21:17:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 21:17:59 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 21:17:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r1, r2, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) 21:17:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000001340)='/dev/rtc0\x00', 0x40000, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, 0x280, 0x0, 0x0, 0x0, 0x800, &(0x7f00000002c0)='bond0\x00'}) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0x7208e9740e18ff24, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000003c0)="aadc77b88748a06999b9aa7a1cdd00976572d446abb25cc739731d0fce54f5f7ad0f457acccd21a6db0b5ee5b35a81ececd5e50cfb9d15f6b434291532bd08f28a8bd7a29b167db8efc0da7aa99ce1350652cf5d7e78ccc7565cab92ee80c7569f070a3b435ffa90152ad3130cd1fd91b0ff043bf05c207748f9b6fadc15fdf8cc34e41239b27c4a6297729fab938d0cd01417d43f316e174d87469c91737901fba60e510bd61b64b70c869855030db0334568f0d363a62e9255ff6b853bfa2aeb290eec04bea9914daa1f1ab185e54379d3760a89a3c5a387aba78d4332383a48c0713141d7bbf18f255aed1c9ff30adc1da7c47b24d430d62fc55419d8a3749daadef3105e97dfbaff9e322dc08d9f204c80e098715925a1cea10420fd7dcda428da2b62abe676179c72ac6884d28c3d66194acf6c3acd686894a66c5db9ab70840db89b66b888219ca5cdd1d790bb4921bc8668a9d4b1a026221c41ea5d7a3dbace3f23390050f5c62e7bc9834bfb4f87d26d6b0c9f9026291e9203013172385eed40b04d8a703baa4c07411d85c0f5375e048162ac53fccdf63d50bc064696f8ac06bcca33a69a8aeb4792ed077a4ed0450f735b263de82d91e5b9209701a12af69a4fb75cc67ad6dd30401d650172a9523e4320c684c59c0ad0f9f598239006b42d78f793b00726b5cc9ae876b0025b58b66b8a52b97c4c1dd512f8b5b8aa11d5f709c5f059dd4fbee6297d7a2166b14eba82e922bea284e56a26a431747557d73eec363e37465f0e07b9133d265ffa6371c289720724be7b9fabe3846a46c04b4de9d297ac878967c03a2319521f6ea7feee3a25ea7541bcedd3a59f3a97c0d943cf09126e6a4aa13ffa4282c2ec11017af2800039c313d5fccfbf7af80b94029e3b8cb37a9b840fd2ed84ed1d481e6be9dec6433fa565bf7fc4490f0f4cccd9fa1aff1a9b14d647a0d932f20d9966562a7e89928903451dd9c85a43a682580b896e6dec3b67bc419db7b6b24801a666e6f7702fa4c030d0ba463e16313556bc8cf1bf6b281b383bb56487016837a7dbf45ee70ee1384ec3473f14e9715611ac638d86ee0ac502e572d820a9e8fe1302a85baff482afddba432123a8664b749d53792b7a7068c19f97f00be7aa47eb6261e1b1d9c5e3eeec5239f14d86e6d02ca4487d7b012d7eac983f9fed6087ed85c772bd026edc4dde8199dd97b7fcfd61b75d8519dfea1473eaae6145bf8718a171b4292eb33c0c4ec23c770f27ebc63d6425d8f717d536c03e81a24bb85f24dfd20b765a1ce2302b7b2fa62f5ea155d7064f964e64db4a32905755055830085342a3eeb0bac237f3888a37ac2fc768a679647ed9885032c1e75c1356932d54c677950dfd1365854f449fe829eaa7eee7163482e16a4f0c3711d7cbfe0c69945a3dee9d1368f612768c726bce9861e4ad98bf928ea96b23955634478f37429b211fbfb3c4d73757e89e9370224a12f4ad5260b8766e588c0dfa6186251a109eb2e17440b0400c7291988d892f78b1fc19da587562e1ec98ba873ab0a250e23f87972e9b37f74d4a53be90f45898725ce58e8c6217dfbd9a3308fe13fffd684ab8e3a17f44bb64cf7f9a8edfd6ba165f578ea7f36075134b1408d57a9e6e214e3800ee97df1bd651d66b21050c9179aa72c8a4a322e1a649f0659e49f84ecc4954c5417481c4a698380636f68f9c19094c234bb65d1b056476edca0df99841c9e298fa64b89d9c252f91a6d70c61272ff302034988999774583cc98d05710912d7c5dc78c186d00f8cfc5ae7db4bd8438e753d0939283f3db24fbe647867feb70f2c21521c91ee89fc5eb178ed11904e248f8dacee2b9479f59f5545b823f079dba5c28f5c369e2846543978b85b71cc2aa3a1df69cb794828f5208ef2671f8df078c267569a2fb0dffa9c2422f8628ea3141e1da5fdfa33bd2cdf39dc56ab7504413e80e4c6bd77dd552ba67a4a72069e310f1cf0ac7d03676fa6768a1ea678c0394081b84463009d4efa2200853f4df2817e6a980d9982e9160b0f66937ffe72e485a611fe2e84ca8a433601f44c2e00b14b5a546bd81a82e7687bb616b5bb7b014d796a99275426b365da34e45f7f2d0770f17c8ed45c64b033f18f6c860702ff785d656ac9c3ef88e2f8eba7c7e019275c2bdd9dd1039fe35160400c542c853264edc4fc5f32c53d866a9440cfa53173aafbdb6cc4b0705971070b1a6657c5ba9d8abf54b1e3be94877e2f6011d7900f27a3faab43d6391e20378421efcb0a1941b5475fddefd49a60ee26534bcd25b00b5010c2bec50614412c5c649483ae62c7e2f5dd54e2d2509c0183ef4a59c765f9b5ee3d53cb723fdb51c18ae925e81271bf5dfc1f0f9cf4f8d5ee3c1bc05318aea362a5dc1d88d8fe9c73e2c4c7e5211cb561e657ed41790a63a7d9ef658dfe479d86cf98628cc99d43346a3f0411a2318f16b93a57b410c73f36cc760d4a22f4adef7de53b5cfb2d03495633987f1b9f500c53dfaac885b63f830817f8cfa6a29a3f0bb4ba298ed2db47b7f01ba55b9cddef83350a09d6dae1fd5a16a050d0e9c108ca60d620904a8003d609b13d2bd862987792f34116317e69334a5959c904252457c8091f87228df03973e99d6d88e92acabad0d29405fb835d657e4147227bdd869c903f92ffd955250b5af9460227e2ff4bbb23b78c2e3decb3b8133b0fb60e89564a8227955524746826ff89f456ec8d659a1fabb793ac325613c889f2db8bd6444805bc82ea3c0dc90c38157f043d9255bc1724fc2094d57167db033fc1b25c19141920b2e7b9534ef4a7cc7f2c64434676b7b870178da671dd3621bf213b94bca1c75a87525ddc4536468aa4adf2527e8289561e2e8889a32619fe85385da6d5c8c0d3951cd3030789dd554db4996e907f446cc4d3d094e5f1ccf0b6f048c89db8f1725190f8b21591a19d4a545b301e8689866b7f65625536b9ae1c55f16dd4f6a37408c1eaef3a4c58d1276990ed1ab89202800d34b7198d10f9986586fccd5ab424f44508d789eab1a535e7773db962cec6fd941925ca3ccea442dd94a6afbb1495be9749a3437973b1c6ce0abf6d15df09a6c5b5364cf936262dee022f649fb83fe33cb59bfe612c0a3e3a3a68c619e365aaa93e88dbeebc436690c6fb575bd15850588529591fcaa2e6359f073eeb64b62236d704ad1559a1816e69b70eb9b6930931a277cb59f0a8e01c1e5ba35995bf30758e789d994ef42d0752ce70065b88f391104d50894736b3e71eb5931742cb363df6c269958825f2d38332d01d48e2aff83e0f99f794fd80ccaa832052c9b8b1885d6ebf5fb4964b3ad1406b7b82b68ab4d599fad55258ff29a9d0179c7c59b48bca01e709f3fb6c667545a8434664dec8c425d3bfe8acd687e8bc06d7308e05f19f1e78dabb9a673db1d813daf21846006a22d60868a707db552699f1d1461327ca93fd9d4277d7ea25d2c98d9c019696fe281fea66be0f58b9bd003733bd3b66991a1a3fa94f851cc1d6f905abe23f00cf49e3d435bf6b488f11b67b135d878e4438e26c5bd958f4bff651c013fa0c46ab402aac9f4df76dfccf512e646e27b564f98a94e3e2836bf362a3a81618aa6d835884d5afcef96b99a88b872a57a8886782b52b8c87f8664338c9ad38f5b3f09044b7106107515717c9a887d5b9fa3d9eafedd018531fbc616725e7ac500a0f65a3a406ea58433d8c50c3f5d2a0e4133d79bf14d3d8905dcf7f99d8701276878fd18ac55f40af05d406c4edb00a38ae5caa169fb09e9d1f4f8674f749821efea4b5af1a7706eec26dcf5e9c605d98ac62bf598fb685fdf8482a1d3d65d907fe1604e0556e69e167d8408a5b901d0ecb4e18b530e3fe2396548617b45b2803433e2305cbe5de36fd597a38c7cba87758259a86b278779dffef3fcdcb11d1f5d03288b1551e22a863b42c0b30cab9c0c17df83960d3cd3cfa9d606e0a6d48aadc51625ab79e221cbed4ba7b860ec1c1e8f55f474119155ec067f1045de07baf2eb1c0a280ce73bc976d82242e645a2c8af43d5a11b1e376bb0e26835f1adfeb9cb46a08dd79f9703d1704c0baa7ddc69988023cf3fa175f960cfc561e7dc532f5608d02074a86c0af126396dba3a64f6c4af86612ea52133237a4230dd0600376bdf5a1ab9d306b48a270d83db0fb0a7b6c641464b0c241c003d94be153ea126e455d95abe7b5aea6c85fc69a971a65d100fe0ed350dad057ad8083d1c06ee5d3f121d79ddcba860c525b5e4842611aa261b7fdc1664c1be8d56c552be012a8e17afca2ef597f52f22689309e1224f9c0642f26f4cdf50cce357db9a8316150beea9ce29f1fe225f5b79d97a2c7a8af43f76ba20307243edd94cebf27694dc19132d8337d00845eeed21e6d17ba680af466932dfd5a27687b8dbf43372870a1d7cb1eeaf95fa951728a6054e8cd41954f953ffeecc0fc65649fbbadd6d3514a4af10cd7ecc1f483f93e98848176264d9a7716b88f8e42ed04e7db11ced05797dfb10108c81a3ca92bfce02cf8c7ca9ea225abc5bafebcecccafc757848dbb0a70", 0xcae, 0x0) keyctl$invalidate(0x15, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:17:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0xfff}}) 21:17:59 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x10000010, 0x0) 21:17:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) 21:18:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r1, r2, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) 21:18:00 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdad}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 21:18:00 executing program 5: request_key(&(0x7f0000000200)="00000035b51f3f1f5ffb07a461d5a20b5c978c546f6b8740ad5bd7e6e977c644c99be5f94fed1b3a67e150ad90cce5040cb2ae961d7c89c86aab0f3e221bc508df7ab5567722e45b029b3c95737f51d0d69e01a434077dc0be2bd05f9797056c9ad9dd894f06b5434b340735532000a7d039632ef2863de2e5bc78ba03190ade90d408c03edd978f8b9018a9d77741a86fbcb9ed35d9b40b167820d33b", &(0x7f00000001c0)={'syz'}, &(0x7f0000000040)='syz', 0x0) 21:18:00 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000020c0)=[{&(0x7f0000000080)}], 0x1, 0x0) 21:18:00 executing program 5: 21:18:00 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) 21:18:01 executing program 5: 21:18:01 executing program 1: [ 395.422258] device lo entered promiscuous mode 21:18:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000001340)='/dev/rtc0\x00', 0x40000, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, 0x280, 0x0, 0x0, 0x0, 0x800, &(0x7f00000002c0)='bond0\x00'}) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0x7208e9740e18ff24, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000003c0)="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", 0xcae, 0x0) keyctl$invalidate(0x15, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:18:02 executing program 5: 21:18:02 executing program 1: [ 396.315882] device lo left promiscuous mode [ 397.070770] device lo entered promiscuous mode 21:18:04 executing program 2: 21:18:04 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) 21:18:06 executing program 4: 21:18:06 executing program 5: 21:18:06 executing program 1: 21:18:06 executing program 0: 21:18:06 executing program 2: 21:18:06 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x0, 0xfffffffffffffffb) 21:18:07 executing program 5: 21:18:07 executing program 0: 21:18:07 executing program 2: 21:18:07 executing program 1: 21:18:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup2(r0, r0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/126) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:18:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000640)=""/84) 21:18:07 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) lseek(r1, 0x0, 0x4) 21:18:07 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80), 0x0, 0x0, 0xfffffffffffffffe) 21:18:07 executing program 0: 21:18:07 executing program 2: 21:18:07 executing program 2: 21:18:07 executing program 5: 21:18:08 executing program 0: 21:18:08 executing program 2: 21:18:08 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:08 executing program 5: 21:18:11 executing program 2: 21:18:11 executing program 0: 21:18:11 executing program 4: 21:18:11 executing program 1: 21:18:11 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:11 executing program 5: 21:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x15, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 21:18:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) 21:18:11 executing program 5: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x8000001) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x4000, 0x4) 21:18:11 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)='em0-security\'/eth0\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x101, 0xffff, 0x3f, 0xfffffffffffffff7, 0x0, 0x100, 0x80, 0x2, 0x1, 0x0, 0x10000, 0x800, 0x59646b24, 0x3, 0x3, 0xbd, 0x2, 0x8, 0x0, 0xff, 0x1, 0x3, 0x80, 0x6, 0x1ff, 0x100, 0x0, 0x800, 0x8, 0x40000000, 0x1, 0x200000000000000, 0x1ff, 0x4, 0x200000000000000, 0x10001, 0x0, 0x7498, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x20, 0x6, 0x8, 0xf, 0x8, 0xdf73, 0x5}, r0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000200)='./file0\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f00000004c0)=""/206}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000006c0)=r1) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9e, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x100000001) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000240)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000400)='em0))]md5sum.^selinux.\x00') openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x81, 0x0, 0x673d, 0x9, 0x0, 0x6, 0x8010, 0x4, 0x0, 0x90, 0x200, 0x6, 0x0, 0x5, 0x6, 0x8, 0x1, 0xd43a, 0x81, 0x1f, 0x200, 0x16840000000000, 0x6, 0x0, 0x3, 0x1, 0x3, 0x351, 0x0, 0x0, 0xff, 0x3, 0x1, 0x2, 0x101, 0x3ff, 0x0, 0x9, 0x4, @perf_config_ext={0x3fff80000000, 0x4}, 0xad4c96e6a4040dc4, 0x6220, 0x40be, 0xf, 0x1, 0x3, 0x8001}, 0xffffffffffffffff, 0xf, r3, 0x4) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) 21:18:11 executing program 2: socketpair(0x4, 0x80000, 0x0, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 21:18:11 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x78010e08, 0x8001) [ 404.979197] binder_alloc: 10616: binder_alloc_buf, no vma [ 404.985107] binder: 10616:10617 transaction failed 29189/-3, size 0-0 line 2970 [ 405.076002] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 405.084890] binder: BINDER_SET_CONTEXT_MGR already set [ 405.090453] binder: 10616:10619 ioctl 40046207 0 returned -16 [ 405.113270] binder: undelivered TRANSACTION_ERROR: 29189 21:18:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memoru '], 0x8) 21:18:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) [ 405.327754] netlink: 'syz-executor2': attribute type 29 has an invalid length. 21:18:12 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:18:12 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, &(0x7f00000003c0)=@raw, &(0x7f0000000180)="170a00eaf43d86d1afd96c158f5efd119fd301015a3f79cc6777658c0ba224ea5918becd1b74a7a7f027696116d1bbb1d7ccbb0c013eec1a32073757c05e50b1c4ace41c8db08f13e892a11120e7de369b827e5b59ca82731176161c9353", 0x0, 0xc3, &(0x7f0000000480)=""/195}, 0x48) 21:18:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140)={r1}, &(0x7f0000000180), 0x8) ioctl$TIOCSBRK(r0, 0x40044591) [ 405.983730] device lo entered promiscuous mode 21:18:13 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x2, &(0x7f00000003c0)=@raw=[@jmp={0x9}], &(0x7f0000000180)="170a00eaf43d86d1afd96c158f5efd119fd301015a3f79cc6777658c0ba224ea5918becd1b74a7a7f027696116d1bbb1d7ccbb0c013eec1a32073757c05e50b1c4ace41c8db08f13e892a11120e7de369b827e5b59ca82731176161c9353", 0x0, 0xc3, &(0x7f0000000480)=""/195}, 0x29) [ 406.025058] device lo left promiscuous mode [ 406.075794] device lo entered promiscuous mode 21:18:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) [ 406.114514] device lo left promiscuous mode 21:18:13 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:13 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x2, &(0x7f00000003c0)=@raw=[@jmp={0x9}], &(0x7f0000000180)="170a00eaf43d86d1afd96c158f5efd119fd301015a3f79cc6777658c0ba224ea5918becd1b74a7a7f027696116d1bbb1d7ccbb0c013eec1a32073757c05e50b1c4ace41c8db08f13e892a11120e7de369b827e5b59ca82731176161c9353", 0x5, 0xc3, &(0x7f0000000480)=""/195}, 0x29) keyctl$invalidate(0x15, 0x0) keyctl$invalidate(0x15, 0x0) 21:18:13 executing program 2: 21:18:13 executing program 4: 21:18:13 executing program 1: 21:18:13 executing program 5: 21:18:13 executing program 4: 21:18:13 executing program 2: 21:18:14 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:14 executing program 4: 21:18:14 executing program 1: 21:18:14 executing program 5: 21:18:14 executing program 2: 21:18:14 executing program 0: 21:18:14 executing program 4: 21:18:14 executing program 1: 21:18:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/127, 0x7f) 21:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x3, 0x428, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x4a0) 21:18:15 executing program 2: 21:18:15 executing program 1: 21:18:15 executing program 4: 21:18:15 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/13) 21:18:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x2d8, [0x0, 0x20000600, 0x20000630, 0x20000808], 0x0, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x350) 21:18:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000140)=0x78) socket$inet6_udp(0xa, 0x2, 0x0) 21:18:15 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:15 executing program 4: semget(0x0, 0x4, 0x0) 21:18:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10001, 0x0) [ 408.653476] xt_cluster: cannot load conntrack support for proto=7 21:18:15 executing program 0: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000003c0)=""/201) [ 408.755279] xt_cluster: cannot load conntrack support for proto=7 21:18:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 21:18:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000980)=""/101, 0x65, 0x1}, 0x2) 21:18:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e40)={&(0x7f0000001e00)='./file0\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600)="1f2bf4c6684f1436900e5d4e6cdffdd6d1b084a055252e9930854092cdb203d9ef3dd173eb7a", &(0x7f0000000640)=""/4096}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001740)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001680)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x9, 0x100000000}, 0x80, &(0x7f0000001d40)}, 0x40000) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=@raw, &(0x7f0000000400)='GPL\x00', 0x3, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_type(r1, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='md5sum)keyringsystem[,}bdev\x00') 21:18:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280), 0x12) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000980)=""/101, 0x65, 0x1}, 0x2) 21:18:16 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=""/4096}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001740)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001680)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x9}, 0x80, &(0x7f0000001d40)}, 0x40000) r2 = socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=@raw, &(0x7f0000000400)='GPL\x00', 0x0, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) 21:18:16 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086607, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x50, &(0x7f0000000600)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000540)='cgroupwlan1^\x00', r1}, 0x5) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) openat$cgroup_ro(r1, &(0x7f00000005c0)='memory.swap.current\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0xfe6f, 0x0, 0x40, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x97b5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x5, 0x9, 0x0, 0x10001, 0x7, 0x77, 0x401, 0x4, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x7fff, 0x80000000, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x46d, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0xffffffffffffff01}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000440)=""/84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x1ff) [ 409.400963] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. [ 409.409791] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. [ 409.462736] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. [ 409.471391] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. [ 409.493449] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. [ 409.502487] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. [ 409.519779] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. [ 409.528612] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. 21:18:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x78010e08, 0x8001) 21:18:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ustat(0x40, &(0x7f0000000040)) 21:18:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x11, 0x0, 0x100000001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21:18:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040), 0x8001) 21:18:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000008) read(r0, &(0x7f0000000040)=""/133, 0x85) 21:18:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)}) 21:18:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e40)={&(0x7f0000001e00)='./file0\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600)="1f2bf4c6684f1436900e5d4e6cdffdd6d1b084a055252e9930854092cdb203d9ef3dd173eb7a", &(0x7f0000000640)=""/4096}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001740)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001680)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x9, 0x100000000}, 0x80, &(0x7f0000001d40)}, 0x40000) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=@raw, &(0x7f0000000400)='GPL\x00', 0x3, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_type(r1, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='md5sum)keyringsystem[,}bdev\x00') 21:18:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x0) 21:18:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) 21:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x18002809, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) close(r1) 21:18:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=""/4096}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001740)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001680)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x9}, 0x80, &(0x7f0000001d40)}, 0x40000) r2 = socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=@raw, &(0x7f0000000400)='GPL\x00', 0x0, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) 21:18:18 executing program 2: [ 411.052051] binder: 10833:10834 transaction failed 29189/-22, size 0-4096 line 2855 [ 411.106860] input: syz1 as /devices/virtual/input/input14 [ 411.123348] binder: 10833:10836 transaction failed 29189/-22, size 0-4096 line 2855 [ 411.163034] binder: undelivered TRANSACTION_ERROR: 29189 [ 411.170171] binder: undelivered TRANSACTION_ERROR: 29189 [ 411.249981] input: syz1 as /devices/virtual/input/input15 21:18:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x0) 21:18:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=""/4096}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001740)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001680)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x9}, 0x80, &(0x7f0000001d40)}, 0x40000) r2 = socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=@raw, &(0x7f0000000400)='GPL\x00', 0x0, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) 21:18:18 executing program 2: 21:18:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x18002809, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) close(r1) 21:18:18 executing program 4: 21:18:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x0) 21:18:19 executing program 2: [ 412.023703] input: syz1 as /devices/virtual/input/input16 21:18:19 executing program 3: 21:18:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x18002809, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) close(r1) 21:18:19 executing program 1: 21:18:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f00000002c0)="a9fb16b1c5fe99e390") r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) 21:18:19 executing program 2: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[]}}, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x102, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)='*', 0x1}], 0x1, 0x0) [ 412.617852] input: syz1 as /devices/virtual/input/input17 21:18:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}], 0x1, 0x0) 21:18:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:18:20 executing program 3: r0 = socket$inet6(0xa, 0x100000002, 0x0) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xff4b, 0x0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 21:18:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000581000000000000000000000009508000000000000000000ebe78e34db781270efbc5e8f97c8939168e7ff8347528c8ef831998d9684c52b4d183e5ce825352b71d86b0536cdbc4a10bc947870026ca7068a6ea934fcb37a4bc078ee1ce63a7ccd7543a67788d6e98b29deae631a73b97a1639c5daff3b7182b1c5957b78064830987c205e9163b5c353d9c7ba0a008dcd849d9c905e8e32d7f4cad2448d91e428b4b870fb5001a2d02a7bbb"], &(0x7f0000f6bffb)="3e501f49", 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 21:18:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x9, &(0x7f0000000200)=0x0) r3 = fcntl$dupfd(r0, 0x0, r0) io_submit(r2, 0x1, &(0x7f0000001940)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1, r3}]) 21:18:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x18002809, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) close(r1) 21:18:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) 21:18:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000001940)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1}]) 21:18:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RATTACH(r1, &(0x7f0000000280)={0x14}, 0x14) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0xc000000000000000}) [ 413.454566] input: syz1 as /devices/virtual/input/input18 21:18:20 executing program 4: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000200)="245ede00", 0xfffffffffffffffd) 21:18:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RATTACH(r1, &(0x7f0000000280)={0x14}, 0x14) ftruncate(r1, 0x208202) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0xc000000000000000, 0x1}) 21:18:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @local}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[{0x10}], 0x10, 0x4000004}, 0x20000080) 21:18:21 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0), 0x4) 21:18:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x13, &(0x7f0000000000), 0x0) 21:18:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x16, &(0x7f0000000000), 0x0) 21:18:21 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x9, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0xffffffffffffff1b}, 0x2000) 21:18:21 executing program 2: 21:18:21 executing program 5: 21:18:21 executing program 1: 21:18:21 executing program 3: 21:18:21 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x9, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:22 executing program 2: 21:18:22 executing program 3: 21:18:22 executing program 5: 21:18:22 executing program 0: 21:18:22 executing program 1: 21:18:22 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x9, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:22 executing program 3: 21:18:22 executing program 2: 21:18:22 executing program 0: 21:18:22 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x9, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:22 executing program 1: 21:18:22 executing program 5: 21:18:22 executing program 2: 21:18:23 executing program 3: 21:18:23 executing program 1: 21:18:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00'}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:23 executing program 2: 21:18:23 executing program 0: 21:18:23 executing program 5: 21:18:23 executing program 3: 21:18:23 executing program 2: 21:18:23 executing program 1: 21:18:23 executing program 0: 21:18:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xd4) 21:18:23 executing program 3: r0 = socket$kcm(0x10, 0x800800000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) 21:18:24 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) rt_sigqueueinfo(r0, 0x3f, &(0x7f0000000040)={0x41, 0x1000000000, 0x0, 0xf}) rt_sigreturn() 21:18:24 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) close(r0) 21:18:24 executing program 1: socketpair$inet6(0xa, 0x6, 0x200, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x0, 0x1, 0x58, 0x2}}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x1, 0x70, 0x7ff, 0x81, 0xffffffff, 0x100000000, 0x0, 0x1, 0x8, 0x2, 0x6, 0xb2d5, 0x7, 0x8, 0x1000, 0x5, 0x3, 0x1, 0x246, 0x8, 0x9, 0x2, 0x6, 0x3ff, 0x5, 0x7f, 0x3, 0x100000001, 0x1, 0xffffffffffffff0d, 0x7fff, 0x10000, 0x8, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0xffffffff, 0x0, 0x100000001, 0x2, @perf_bp={&(0x7f0000000280), 0x3}, 0x408, 0x5, 0xffffffffffffffff, 0x7, 0x0, 0x8, 0x7}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000400)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1a0000000000000000b95e0000000000105971f91e0ad7943b7d919eca25cf04afbd16844394b1a917a8a58b38597030e60f55aa27df0abb841f673d7097de4af74b64ec1f9c92c2c50535231d1acaf10643d65c12ee83219def1158d895ded6c9c56e5570d6dad0d6b46d43"]}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x300000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000000000000000030006000000000002000000e0000059d8fd57186fe8a00002000100000000000000000200000000030005000000000002000000e00004000000000000000000"], 0x60}}, 0x0) 21:18:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)=[0x30]}}], 0x0, 0x0, &(0x7f0000000400)}) 21:18:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r0, 0x4c01) 21:18:24 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000411000), 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 417.556713] binder: 11040:11043 got transaction with invalid offset (48, min 0 max 40) or object. [ 417.566255] binder: 11040:11043 transaction failed 29201/-22, size 40-8 line 3033 21:18:24 executing program 1: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000040)='schedstat\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) exit_group(0x0) [ 417.674855] binder_alloc: binder_alloc_mmap_handler: 11040 20001000-20004000 already mapped failed -16 [ 417.712627] binder: BINDER_SET_CONTEXT_MGR already set [ 417.718105] binder: 11040:11043 ioctl 40046207 0 returned -16 [ 417.752405] binder_alloc: 11040: binder_alloc_buf, no vma [ 417.758260] binder: 11040:11049 transaction failed 29189/-3, size 40-8 line 2970 [ 417.807017] binder: undelivered TRANSACTION_ERROR: 29201 [ 417.816873] binder: undelivered TRANSACTION_ERROR: 29189 21:18:24 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) read(r0, &(0x7f00000007c0)=""/244, 0xff05) 21:18:24 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)=[0x30]}}], 0x0, 0x0, &(0x7f0000000400)}) 21:18:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(r0, &(0x7f0000411000), 0xfe7d) 21:18:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x28, 0x8}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000020007002e2f66696c"], 0xe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 418.283481] binder: 11071:11072 got transaction with invalid offset (48, min 0 max 40) or object. [ 418.292772] binder: 11071:11072 transaction failed 29201/-22, size 40-8 line 3033 [ 418.312612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 21:18:25 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) [ 418.353469] binder: undelivered TRANSACTION_ERROR: 29201 21:18:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) socketpair(0x15, 0x5, 0x8000000000000000, &(0x7f0000000040)) 21:18:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) 21:18:25 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000000000001800000040000000d8a5903f316b66325fd0b506801f66d466a2a15e1fb34c55639c01a6e852dcf35f483619d2e5e21f6f11af1a2db229cd3178aa43706375c5522a7370985fcd57a3056b42aa1f7f4592dd9f4f38a5f9c8fe2c7d71532251b1d3a452b49db349898ee1614cdc4b43c7dfadab7360aa595118b560c602b7683e149b3d8068fc004044184db09b46da2ae862912cd394be400ddd0f48aba794b4cf1beff23b33c6e5769a1de528ac32711d7edbc800000000a62c0d027421dca53c27425e60d24130853ba5d50a5dd4d0b9d26000"], &(0x7f00000000c0)=""/39, 0xe4, 0x27, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x10, &(0x7f0000000580)={&(0x7f0000000440)=""/223, 0xdf}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000740)="262c913a6574683100", 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f00000007c0)='.\x00'}, 0x30) perf_event_open(&(0x7f00000006c0)={0x5, 0x70, 0x4, 0x100000001, 0xfff, 0x8, 0x0, 0x2, 0x81, 0x8, 0x87, 0x12, 0x10000, 0x80000000, 0x0, 0x200, 0x0, 0x2, 0x5, 0x5, 0x3f, 0x0, 0x7ff, 0x8, 0x1, 0x9, 0x6, 0x100, 0x8, 0x7, 0x401, 0x10000, 0x0, 0x1d, 0xfffffffffffffffa, 0x8, 0x3, 0x7fffffff, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000680), 0xd}, 0x1000, 0x4, 0x42, 0x6, 0xffffffff, 0x0, 0x7}, r2, 0x2, r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000980)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) close(0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000540)={r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)="2f6465762f6e65742f74756eff", 0x241, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() r9 = perf_event_open$cgroup(&(0x7f0000000300)={0x7, 0x70, 0x0, 0x80000001, 0x8, 0x1f, 0x0, 0x40, 0x0, 0x6, 0x1, 0x6, 0x4, 0xb2, 0x0, 0x80000000, 0x80, 0xfffffffffffffff9, 0x0, 0xfff, 0x6, 0x2000002, 0x4, 0x20, 0x9, 0x7fff, 0x401, 0x100000000, 0x9, 0x800, 0x1f, 0x3, 0x101, 0x8, 0x31c, 0x287, 0x10001, 0x4, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f0000000240)}, 0x4000, 0x0, 0x0, 0x6, 0xfffffffffffffc01, 0x3, 0x1ad}, r8, 0xc, r6, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000600)='threaded\x00') openat$cgroup_ro(r4, &(0x7f0000000840)='rdma.current\x00', 0x0, 0x0) write$cgroup_type(r7, &(0x7f0000000080)='threaded\x00', 0x302ea24c) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0x50, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x101) socket$kcm(0x29, 0x2, 0x0) close(r6) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000640)=r1, 0x4) 21:18:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3a01]}, 0x6}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000027c0)="d2", 0x1}], 0x1, &(0x7f0000000000)}, 0x20004040) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:18:26 executing program 2: io_setup(0x9, &(0x7f0000000080)) 21:18:26 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x28, 0x8}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000020007002e2f66696c"], 0xe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x28, 0x8}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000020007002e2f66696c"], 0xe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x28, 0x8}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000020007002e2f66696c"], 0xe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:26 executing program 2: 21:18:27 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x28, 0x8}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000020007002e2f66696c"], 0xe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:27 executing program 2: 21:18:27 executing program 1: 21:18:27 executing program 5: 21:18:27 executing program 0: 21:18:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:27 executing program 2: 21:18:27 executing program 5: 21:18:27 executing program 1: 21:18:27 executing program 2: 21:18:28 executing program 0: 21:18:28 executing program 3: 21:18:28 executing program 5: 21:18:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007680)={&(0x7f00000000c0), 0xc, &(0x7f0000006ec0), 0x0, &(0x7f0000007540)=[@rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}], 0x28}, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) 21:18:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000080), 0x4, r3, 0x9}) 21:18:28 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) 21:18:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0xffffffffffff2f4a, 0x2, r3}) 21:18:28 executing program 3: r0 = memfd_create(&(0x7f0000000280)="bf82c530d5a84baa734e301d5be4beaa8d04531a55734e5f8efa7fc1afda12e85c16a8ff7257f86fde22a5f1ab9c90d44653db00870ad3a68cdb411b342e1242763c46db241774798929a83cc25b8cdf90e47782a4ae66224171ab7e7296f3a886b4631908d1141185030accd1e4372542290ffd09b795b1d31d9bb3f344c26659f582341cfd19019081e897d3acf4324604716785b6f8cdbca26c8ed1a1c2b95bd424cbb7ca21f6093a143a259b230d62dfe7270ae1cc28e1df31e4e37e61bbf7c0feb95e603385fa2277eb3d361ce98c375545e2da561b860c8de36b9257b74d014c0028b4239e7f80", 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x100011, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) 21:18:28 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f0000000140)) dup3(r0, r1, 0x0) 21:18:28 executing program 3: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 21:18:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000080), 0x4, r3, 0x9}) 21:18:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') dup2(r0, r1) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2, 0x0) 21:18:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000"], 0x1}}, 0x0) 21:18:29 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) shutdown(r0, 0x0) 21:18:29 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000e00)={'ip6tnl0\x00', {0x2, 0x4e24}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000d80)=0x1f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0300000000000000"], 0x1}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000dc0)='lo\x00') ftruncate(r3, 0x2007fff) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x101, 0xb0cd7b2, 0xe60, 0x0, 0x3}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000f80)=""/121) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x28, &(0x7f0000000180)}, 0x10) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000140)={0x0, 0x9, 0x9}) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x400, 0x8, 0x6, 0x4, 0x0, 0x3f, 0x2, 0x199, 0x40, 0x394, 0x4, 0xc3e, 0x38, 0x1, 0x1f, 0x3, 0xd6}, [{0x60000003, 0xb2, 0x1, 0x5, 0x3, 0xd8, 0x0, 0x1ff}], "89f440000cc2bf9d0d8a2e92d013ad5fa40dde7ef66070b45e195775f5eb9e1e4d0b1befd8f8c1c9321c2ebc763cfb973e6e363512e0900bbe0e271aaabd83981a29b2c64e95a98f29f3", [[], [], [], [], [], []]}, 0x6c2) epoll_create1(0x80000) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x6) getpgrp(0x0) getpgrp(0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) 21:18:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"7601806e3000", 0x9811}) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000740), &(0x7f00000003c0)}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 21:18:29 executing program 1: 21:18:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) 21:18:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x2, r3}) 21:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r4, r1) 21:18:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000200)='./bus\x00', 0x0) utimes(&(0x7f0000000000)='./bus\x00', &(0x7f0000000340)={{}, {0x0, 0x7530}}) 21:18:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 21:18:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter6\x00') pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x5e) 21:18:30 executing program 5: 21:18:30 executing program 1: 21:18:30 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket(0xa, 0x3, 0x1000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) sendto$unix(r0, &(0x7f0000000000), 0x5a4, 0x0, &(0x7f0000000080)=@abs, 0x6e) 21:18:31 executing program 0: 21:18:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x2) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0x4e) recvmsg(r1, &(0x7f0000005f40)={&(0x7f0000005d00)=@can, 0x80, &(0x7f0000005e40), 0x0, &(0x7f0000005e80)=""/138, 0x8a}, 0x2) 21:18:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 21:18:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter6\x00') pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x5e) 21:18:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) 21:18:31 executing program 4: 21:18:31 executing program 2: 21:18:31 executing program 1: 21:18:31 executing program 0: 21:18:31 executing program 3: 21:18:31 executing program 4: 21:18:31 executing program 5: 21:18:31 executing program 0: 21:18:31 executing program 1: 21:18:32 executing program 2: 21:18:32 executing program 5: 21:18:32 executing program 0: 21:18:32 executing program 4: 21:18:32 executing program 1: 21:18:32 executing program 3: 21:18:32 executing program 5: 21:18:32 executing program 2: 21:18:32 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x3000, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:18:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x1, 0x0, &(0x7f0000000040)="c5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000500)}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240), 0x4) 21:18:32 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) rt_sigprocmask(0x0, &(0x7f0000000280)={0x4}, &(0x7f00000002c0), 0x8) rt_sigreturn() [ 425.866809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:18:33 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) 21:18:33 executing program 5: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) exit_group(0x0) [ 426.014912] binder: 11329:11330 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 426.063457] binder: 11337 RLIMIT_NICE not set [ 426.068314] binder: 11337 RLIMIT_NICE not set 21:18:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140), 0x1c) [ 426.111405] ptrace attach of "/root/syz-executor1"[11335] was attempted by "/root/syz-executor1"[11336] [ 426.136880] binder: 11329:11341 got reply transaction with no transaction stack [ 426.144786] binder: 11329:11341 transaction failed 29201/-71, size 0-0 line 2762 [ 426.194328] ptrace attach of "/root/syz-executor5"[11343] was attempted by "/root/syz-executor5"[11344] [ 426.205072] PANIC: double fault, error_code: 0x0 [ 426.209924] CPU: 1 PID: 11335 Comm: syz-executor1 Not tainted 4.19.0+ #82 [ 426.216907] ================================================================== [ 426.224301] BUG: KMSAN: uninit-value in irq_work_claim+0x153/0x390 [ 426.230648] CPU: 1 PID: 11335 Comm: syz-executor1 Not tainted 4.19.0+ #82 [ 426.237587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.246957] Call Trace: [ 426.249556] <#DF> [ 426.251737] dump_stack+0x32d/0x480 [ 426.255404] ? irq_work_claim+0x153/0x390 [ 426.259603] kmsan_report+0x19f/0x300 [ 426.263454] kmsan_internal_check_memory+0x35f/0x450 [ 426.268591] ? __msan_poison_alloca+0x1e0/0x2b0 [ 426.273313] kmsan_check_memory+0xd/0x10 [ 426.277410] irq_work_claim+0x153/0x390 [ 426.281456] irq_work_queue+0x44/0x280 [ 426.285395] vprintk_emit+0x693/0x790 [ 426.289256] vprintk_default+0x90/0xa0 [ 426.293183] vprintk_func+0x26b/0x2a0 [ 426.297025] printk+0x1a3/0x1f0 [ 426.300394] dump_stack_print_info+0x2c4/0x3c0 [ 426.305030] show_regs_print_info+0x37/0x40 [ 426.309397] show_regs+0x38/0x170 [ 426.312919] df_debug+0x86/0xb0 [ 426.316237] do_double_fault+0x362/0x480 [ 426.320349] double_fault+0x1e/0x30 [ 426.324016] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 426.329491] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 426.348421] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 426.353815] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 426.361105] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 426.368400] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 426.375691] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 426.383010] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 426.390326] [ 426.392587] [ 426.395922] kmsan_memmove_origins+0xbd/0x1d0 [ 426.400462] ? kmsan_memmove_shadow+0xad/0xe0 [ 426.405024] __msan_memmove+0x6c/0x80 [ 426.408862] fixup_bad_iret+0x9b/0x130 [ 426.412800] error_entry+0xad/0xc0 [ 426.416358] RIP: 0000: (null) [ 426.420300] Code: Bad RIP value. [ 426.423688] RSP: a3fb7f:00007f3486b479c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 426.431606] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 426.438904] RDX: cc6c5ef7acbf3600 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.446191] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 426.453519] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 426.460817] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 426.468156] ? general_protection+0x8/0x30 [ 426.472430] ? general_protection+0x8/0x30 [ 426.476702] [ 426.480076] [ 426.481749] Local variable description: ----__ai_ptr@irq_work_claim [ 426.488165] Variable was created at: [ 426.491909] irq_work_claim+0x4b/0x390 [ 426.495822] irq_work_queue+0x44/0x280 [ 426.499717] [ 426.501360] Byte 7 of 8 is uninitialized [ 426.505446] Memory access of size 8 starts at fffffe0000045a38 [ 426.511424] ================================================================== [ 426.518796] Disabling lock debugging due to kernel taint [ 426.524260] Kernel panic - not syncing: panic_on_warn set ... [ 426.524260] [ 426.531660] CPU: 1 PID: 11335 Comm: syz-executor1 Tainted: G B 4.19.0+ #82 [ 426.539994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.549367] Call Trace: [ 426.551983] <#DF> [ 426.554169] dump_stack+0x32d/0x480 [ 426.557851] panic+0x57e/0xb28 [ 426.561162] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 426.566650] kmsan_report+0x300/0x300 [ 426.570494] kmsan_internal_check_memory+0x35f/0x450 [ 426.575631] ? __msan_poison_alloca+0x1e0/0x2b0 [ 426.580353] kmsan_check_memory+0xd/0x10 [ 426.584452] irq_work_claim+0x153/0x390 [ 426.588475] irq_work_queue+0x44/0x280 [ 426.592431] vprintk_emit+0x693/0x790 21:18:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x258, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/19, 0x13, 0x21, 0x0, 0x0) 21:18:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}) [ 426.596299] vprintk_default+0x90/0xa0 [ 426.600217] vprintk_func+0x26b/0x2a0 [ 426.604055] printk+0x1a3/0x1f0 [ 426.607435] dump_stack_print_info+0x2c4/0x3c0 [ 426.612103] show_regs_print_info+0x37/0x40 [ 426.616461] show_regs+0x38/0x170 [ 426.619955] df_debug+0x86/0xb0 [ 426.623267] do_double_fault+0x362/0x480 [ 426.627367] double_fault+0x1e/0x30 [ 426.631031] RIP: 0010:kmsan_get_origin_address+0xa/0x370 21:18:33 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180001000000000000020000020000000000000500000000080005007f000001"], 0x1}}, 0x0) [ 426.636506] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 426.655436] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 426.660829] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 426.668119] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 426.675417] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 426.682704] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 426.689999] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 426.697308] [ 426.699560] [ 426.702877] kmsan_memmove_origins+0xbd/0x1d0 [ 426.707423] ? kmsan_memmove_shadow+0xad/0xe0 [ 426.711956] __msan_memmove+0x6c/0x80 [ 426.715787] fixup_bad_iret+0x9b/0x130 [ 426.719716] error_entry+0xad/0xc0 [ 426.723274] RIP: 0000: (null) [ 426.727193] Code: Bad RIP value. [ 426.730581] RSP: a3fb7f:00007f3486b479c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 426.738493] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 426.745781] RDX: cc6c5ef7acbf3600 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.753070] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 426.759978] binder_alloc: binder_alloc_mmap_handler: 11329 20001000-20004000 already mapped failed -16 [ 426.760384] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 426.760399] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 426.760440] ? general_protection+0x8/0x30 [ 426.788680] ? general_protection+0x8/0x30 [ 426.792954] [ 426.797353] Kernel Offset: disabled [ 426.801008] Rebooting in 86400 seconds..