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", 0x1000}, {&(0x7f00000023c0)="916a385b3e01dafcf7d51f4b034871ee7b330524becb3ed3bd66313bbcf13a2ab2fac53afd64e8c7198152b9c86840b22dda08d5c0184f25917bab12500089dc5697359dc99db62341cba733836afbafc1e988383b0cbe02926785cb84800f6ecfa551639aa82dc4a1a133259f69ce40fe9aa84716de89a54bdf8f76e7b7a4e77229805e8f7a58bee127bcd6667de9780e14b311cc97a0fdb5c623ff06519abec29d0ef3a64ab2efeab0721245c0dd23a3b785a9ab7d5ce46d860eea2bee7e7188013eaabff88e174221f94bd76b6634f2e29d1d14f5282c3265b6044aa988b568364869fd4227f702d4e226fc622fcf9d", 0xf1}, {&(0x7f00000024c0)="cdcfd7e1ff068dce0bf197d8c83e769e5340fca061a96c564a9dbc237711e1c853f018c85129e154753892ee2a012105288ac76de3bfd6e763354d5eb398", 0x3e}], 0x7, &(0x7f0000002580)=[{0x60, 0x11, 0xffffffff, "9bfa5849f8e438ae9551abe9cce98a859b4a3d061c6a7dc5aac99406b1d7b14a624a6c78245bfb56ee93c027f3dbef5ad58e2f5288e349676f36607247abb2dc52cb25411690137647"}], 0x60}, 0x6}], 0x2, 0x40) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xec, r5, 0x710, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x377d, @loopback, 0x8dce}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8ae}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000280)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 13:19:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 361.256513] audit: type=1326 audit(1552828741.307:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12781 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 13:19:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, &(0x7f0000000240)=@isdn, &(0x7f0000000140)=0x80, 0x800) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="02130000020087000000000000000000e9c2ef29db885de0b65ba1e65966b6a5f2f2a3993a3328298d41000c90b0e732c37d01f99108f7d1022a68bdf3daeff46589bc23a9e9e76f9bcba19adf838adf5b5f1c9c10752cef2895cbaf8f48d3effacb983044413e7ddc4d3cc166d8b451c753214005bc8b29c3b3b7b083249fe417513073a7eb2d776efe97889d1ab7eb4d703a5f177221726c5ac5b837c16632848fed16380000206722d8fc1dada935e05d7b0660162b8f6d798f13dbc3aaf4947e39f8746739f7610a1bcab2f02e61d7575939f51e2017d1f8d1186692af4227d155eb41cd417f13000000"], 0x10}}, 0x0) 13:19:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x2c, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) 13:19:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 361.916726] audit: type=1326 audit(1552828741.967:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12781 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:02 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r1, 0x7}, 0x0, &(0x7f0000000280)="35b173e94c3db7499d607542022d5bbf17890f73baf62382e508990a16d2f3fe1d9e2761f18ab86bf91cb904d4e181fe24ef79a47729ad84542f05657a4b239fa91bf2dd5ac7f3ed331c45a04f669f05542c57230849ff6825388d9f192325eeab724a197b3985b14d7b2e8674dbb1de29aa5c376d6129b64ab53bfd4fd37626916832fe2567aff09cb8d064e8180a2fe23e39e9423ec78753606b", 0x0) 13:19:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x7ff, 0x20401) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x800) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000020db521dd2aa661a0003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030104000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="02130000020092fb5783b3d04352591c6fa38c19ee00000083000000000000b190ff9843bcfdd26448c3527ebb4dd7e240a3bf1a804305437c18374b6d2040368556031ac2857b2d8815d62c58469ad49de522a3d6b58e0aec46e1a7b56e35ed4eed1a8e94185e913961c84d9a0cd1319afedf35c09468873008f3772a0606fa16130ea8df560c2f005903330ae8184a9ea5d300000000000000000000000000"], 0xae}}, 0x0) flistxattr(r1, &(0x7f0000000380)=""/255, 0xff) r3 = dup2(r0, r1) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000280)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000002c0)=0xfff, 0x4) acct(&(0x7f0000000540)='./file0\x00') openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000240)=0x1e) 13:19:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x1, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), 0x0}, 0x20) 13:19:02 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:02 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xda) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/127, 0x19c}], 0x1, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 13:19:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1, 0x40000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:02 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:02 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x9a80, 0x6, 0x187615e3, 0x3, 0x0, 0x7, 0x1000, 0x3, 0x1, 0x7, 0x1, 0x400, 0x3ff, 0xffffffff, 0xb098, 0x0, 0x0, 0x3, 0x10000, 0x6, 0x0, 0x8000, 0x2, 0x2, 0xffffffffffff8000, 0x3, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x5, 0x800, 0x8001, 0x0, 0x7f2, 0x4, @perf_bp={0x0, 0xa}, 0x20, 0x9, 0x0, 0x3, 0x1000, 0x8, 0x5}, r0, 0xc, 0xffffffffffffffff, 0x0) close(r1) unlink(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)}, 0x6000000) r4 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) openat$cgroup_int(r3, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f0000001280), 0x4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='memory.swap.current\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa, 0xffdc}}, 0x0}, 0x48) 13:19:02 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000100)=""/83, 0x53) 13:19:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 13:19:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = fcntl$getown(r1, 0x9) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/net\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=""/17, 0x11, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4) 13:19:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 363.212439] protocol 88fb is buggy, dev hsr_slave_0 [ 363.218076] protocol 88fb is buggy, dev hsr_slave_1 [ 363.224059] protocol 88fb is buggy, dev hsr_slave_0 [ 363.229639] protocol 88fb is buggy, dev hsr_slave_1 13:19:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x9) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000240)=0x4, 0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8, 0x40180) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000300)={r0, 0x100000001, 0x1, "c29f5515d66c0ee297131278e07653ff036a303c83c418c5e5d6207cd02b0024b37ab010783613b56fd495218f7a9ac0b4e9869f712f2151f3be5a20800689543169bf7419f894accebaca41efd4ac5d2abe9e7f197df7fdc35d433f4fe9945f063069b691d4fda4df5cff841f1b784f4f89d80248fa4d1d7cdf6c60aede43d8d03690b347907f863e5cd2e331c014fd3359e30d3db948fb0539896e1dc535b65049"}) 13:19:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300), 0x1, 0x2, 0x0) 13:19:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="159bc316ce7853e9515802b2eb24a5fd58655ba59fcac48a41c93606b10ce2e2500e45923d08670d075104260fc093f8b0280697521667c67a"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x18, r1, 0x0, 0x0) 13:19:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="000044a3632450c44f73583fed84ceb4c439fd0914a9b64e9aa5ace763c0c3c61b91f5e65056dafc23319f7598cd3af4cbed883c09e14a809dc6ec0532d8908cb68c839ef5ead30a892f6e33b2"], 0x10}}, 0x0) [ 363.836704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:19:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:04 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:04 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fremovexattr(0xffffffffffffffff, 0x0) 13:19:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000240)={0x61, 0x3002}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:04 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 364.249755] audit: type=1326 audit(1552828744.297:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12925 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x4}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02130000020600000000000000000000"], 0x10}}, 0x0) [ 365.005609] audit: type=1326 audit(1552828745.057:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12925 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:06 executing program 4: 13:19:06 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:06 executing program 3: 13:19:07 executing program 3: 13:19:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:07 executing program 4: 13:19:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df000021130795b19f6c940f55aba725c5ec0e074d08000002000000"], 0x80}}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) sched_getattr(r3, &(0x7f0000000200), 0x30, 0x0) 13:19:07 executing program 3: 13:19:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:07 executing program 4: 13:19:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000480)=""/249, 0xbd1b801841b85b0, 0x0, 0x0, 0xfffffffffffffda2) 13:19:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c7d66f22ce4968cb002802130200020000000000000000000000"], 0x10}}, 0x0) 13:19:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getpid() 13:19:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00\xaat{\x04\x91v\xf4\x93\x82A6\x88\xf7\"\x1a\xe3\xa3\xd0\xd3K\x0f\x839\x05\xe0\x1d\xc1yhBLz\x0fC\x9a\xe4\xf8\xfcmdL9\"R\xd5\xb3\xc8\x10\x98\'\xfcy\xafY&\xdb\x90\xa4\xcc[\xfb\xc3\x96\x878\x9e\x89\x99\xcb=\xf9\xb5\xe62\x9f\xd3]\x17Q\xa8\xa5\x94W\xa66\xc3\x17r\x7f\x16\xfa\x1a\xaeC\x88\a\xbdf\x0f\xfb\x85\xbc\x8d\x9c\x9aIyv\xec0\x878\xc4\xda\xe9\xa8\xd9J\x8f\x8d\xb5\x94c\xbeX\x82\xf6\n+\x81\xab{Uc\xe4y=\xd7', 0x8d) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) 13:19:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:19:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x604000, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x22, 0x20, &(0x7f0000000240)="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", {0x7, 0x5, 0x2036315a, 0x1, 0x80, 0x0, 0xc, 0x1}}) 13:19:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:08 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:08 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sync_file_range(r0, 0x6, 0x8001, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 13:19:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:08 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x4, 0x5) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x101000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x14) kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) read$eventfd(r2, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001200), &(0x7f0000001240)=0x4) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000001180), &(0x7f00000011c0)=0x4) getgroups(0x9, &(0x7f00000001c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee00, 0x0, 0xffffffffffffffff]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={r1, r5}, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x51) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={[], 0xd}, 'veth1_to_bridge\x00'}}, 0x1e) 13:19:08 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0xa, 0x600000000000000, [0x2ff, 0xbfffd], [0xc2]}) 13:19:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') 13:19:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0xa, 0x600000000000000, [0x277, 0xbfffd], [0xc2]}) 13:19:09 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x4800, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x301, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x200000000000102}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 13:19:09 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x18000800) 13:19:09 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000200000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000ff0f0000060000000002000200"], 0x80}}, 0x4010) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000ac8e0000910ef47f9864f0b6020040000000000000000000"], 0x10}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 13:19:10 executing program 1: unshare(0x8000400) bpf$BPF_GET_MAP_INFO(0x2, 0x0, 0x0) 13:19:10 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000500)) 13:19:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:10 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300)='/dev/hwrng\x00', 0x0, 0x0) unshare(0x8000400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 13:19:10 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:10 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r1, r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00'}, 0x0) 13:19:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x1c6, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 13:19:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df000021000800000200000000"], 0x80}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000600)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='westwood\x00', 0x9) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x40, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0xfb}, 0x8) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x111000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000640)={0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000680)={r5, 0x80000, r4}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000006c0)='bic\x00', 0x4) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000580)={0x6, {0x7, 0x684, 0x8001, 0x52e2}, {0x8, 0x5e, 0x377280000000, 0x1000000}, {0x0, 0x8001}}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={0x0, r6}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000500), 0x4) syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x8, 0x109200) r7 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x6, 0xc00) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021300000300000000000000100000000efd98883f12edecdf25a57bfd249969cb929dfed4151a334db244eeadeb97bc688efe141c80c02de4a5aa2611fcae01f9ec7880d79f64223af9854d836f84817c4588830a6bb7811eb894e7b5e1e6cc3d527d06db9ee3c7dc2e5fdbf05d0ca7ed5e9e8dd3d7c55748f18923a80001f1c5bb56861a2b2df03bbfc1c327276aa61077572fbb52bfb14c3db1d6cebe6094338c84ef91f00d178885"], 0x10}}, 0x0) [ 370.595698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.602834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:19:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:19:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'ip6_vti0\x00', 0x4000000003fc}) 13:19:10 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 370.749637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.933076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:19:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, 0x0) 13:19:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001580)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000001680)=0xe8) r3 = syz_open_dev$media(&(0x7f0000001c80)='/dev/media#\x00', 0x7, 0x400000) write$P9_ROPEN(r3, &(0x7f0000001cc0)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x1}, 0xfff}}, 0x18) r4 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000016c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001800)=0xe8) fstat(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000018c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000019c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)="9beb0fd2e7d5f8859fd04f4960dd2e34082b8e6ffbc409719ef27f994e71ac24b1f8787d14f401086c9fe03b8702f13aa7b46d7bcdd1bfb5515479d935ed4c85006d91e7e50870507c8d5f3a1af5e9c8b90ad2c318f820e845a9c9f3963582cd3de2267ab6f80dc56edde23aabe4fb50d2ea866abcdd4435f3371b3b6dd7601145e7b2922b1dc5be2abc9eec03acf6fa6e2282be079ecf5cca", 0x99}, {&(0x7f0000000380)="c3312d322b7c8b1ed083567bb19f70f361b702f48afafe056efd26a9bb6cbcab485cae72996321203b8946e0a85f0d1d1b634e896e4ec9433253534e387a7257531a4396e51250849bd1e8fb343ce138230d82", 0x53}, {&(0x7f0000000400)="ae74a4baee1dcdaf980721f68ae6479539c1b81daf15c7ee76a37972947913b61f10b86ebc24c44ddae80e1acc9c57e68a0ad186387c6aa6186e6966c935135c92838edadf18568502f26f0724419e1a29c653a9993f9a3ef513297e740d3a3b0f1d776bcf1cd06c9b8700519a8d6c0165c3afe2a53aa6b1ee760ee58172bc1a260d7e27dc6e92bc7805074010b199b54f8c96d430c39ab23abcd5afe920b7951052747c84369da4a8ae30213ff0d0843981f27863a28659b91fdc0b228be921b208e70d6e29f234c936351c", 0xcc}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r1, r2, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}], 0x78, 0x4010}], 0x1, 0x4000004) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r12 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000001b80)={r12, 0x1, 0xfffffffff0000000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r13 = socket$key(0xf, 0x3, 0x2) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001c40)=0x10000, 0x4) sendmsg$key(r13, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r14 = msgget(0x3, 0x41) msgctl$IPC_STAT(r14, 0x2, &(0x7f0000001bc0)=""/104) [ 371.002194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:19:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 371.176302] QAT: Invalid ioctl 13:19:11 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') getpgrp(0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x6ea) r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0xffffe, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 13:19:11 executing program 3: 13:19:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x40180) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x4, 0x4}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:11 executing program 4: 13:19:11 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:11 executing program 3: 13:19:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:11 executing program 1: 13:19:12 executing program 3: 13:19:12 executing program 4: 13:19:12 executing program 1: 13:19:12 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x100) r2 = inotify_init1(0x0) sysinfo(&(0x7f0000000240)=""/200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000340)={[0xd000, 0x0, 0x2002], 0x8, 0x20, 0xfffffffffffffff7}) tee(r0, r0, 0x3, 0x1) 13:19:12 executing program 3: 13:19:12 executing program 4: 13:19:12 executing program 1: 13:19:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:12 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:12 executing program 4: 13:19:12 executing program 1: 13:19:12 executing program 3: 13:19:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:ptmx_t:s0\x00', 0x1c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x9, 0x204040) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f00000002c0)='./file0\x00', r2}, 0x10) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) time(&(0x7f0000000380)) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:12 executing program 4: 13:19:12 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:13 executing program 1: 13:19:13 executing program 3: 13:19:13 executing program 4: 13:19:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df00003eb808000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:13 executing program 3: 13:19:13 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:13 executing program 1: 13:19:13 executing program 4: 13:19:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2280, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1, 0x80, 0x6, 0x8, 0x1, 0xbad8, 0xffffffffffffffab, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xd3, 0x8, 0x2, 0xc3, 0xc0c}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x1ff, 0x5, 0xfffffffffffff801, 0xe812, 0x7, 0x1, 0x9, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r3, 0xcd, 0x5, 0xba4, 0x800, 0x3c4515c4, 0x2, 0x3ff, {r4, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x19}}}, 0x3ff, 0x0, 0x7fff, 0x2, 0x80000000}}, &(0x7f0000000480)=0xb0) 13:19:13 executing program 1: 13:19:13 executing program 3: 13:19:13 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:13 executing program 4: 13:19:13 executing program 3: 13:19:14 executing program 1: 13:19:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x2, 0x101080) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x24) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x100, 0x141c01) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0x7, 0x0}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000740)={0x75c, 0x206, 0x101, 0x9, r3}, &(0x7f0000000780)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffffff0003) r4 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCEXCL(r0, 0x540c) sendmsg$key(r4, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200000000000000000000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000ce3990a7c84ac6f0eed1bd5449ff9da6201d"], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0213000002a1693abbbdd000000000007000000040a1e222dfbf485496f50fd26c704e45e667ef6865c7f3b66e324db76ed03c059410e618ed358e8434a98f9bb534754889841e956462952b95c5a06267d0950003c1e083ba459b67debc4759a7fe6bdd2f2252a7cf8a75e23fc5012e548a7444c65ea1a0b7a1aded44c6edee120ed1b92a910115045bf3b49f45766367d18164e9b99a824cfa1e0f9ac74702124985f337e1f6661aa673bf0ecfc3c3971be866b78fb8f86ce489df7a152858d50b1cb89bec68af07c88bfa84f4351be9c2a9ed0002000000000000c4538500ac3a44e5459eb6fe8c14578f1548a39095e69fb8fe134e"], 0x10}}, 0x0) 13:19:14 executing program 4: 13:19:14 executing program 1: 13:19:14 executing program 3: 13:19:14 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:14 executing program 1: 13:19:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:14 executing program 4: 13:19:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x20, 0x220000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000240)={{0x0, 0x3, 0x8, 0x3, 0x100000000}}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:14 executing program 3: 13:19:14 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:14 executing program 1: 13:19:14 executing program 3: 13:19:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000005c0)="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") sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0xc, 0x3, 0x5, 0x5, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0xffff, 0x6, 0xa, 0x4, 0x80000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x28}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x6, 0x4, 0x7, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0xa8, {0x6, 0x7f, 0x0, 0x0, 0x0, 0x20, 0x0, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x19}}}]}, 0x50}}, 0x20040000) 13:19:14 executing program 4: 13:19:15 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:15 executing program 1: 13:19:15 executing program 3: 13:19:15 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) 13:19:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0xffffffffffffffd4}}, 0x0) 13:19:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1, 0x10400003) 13:19:15 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x0) 13:19:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:19:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8, 0x101400) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000240)=0x10000) 13:19:15 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/anycast6\x00P\x12\x89\xea\x0fF\x01:\x99\x01Uo\xccof%r\xa3=\'\xc3b\xa4E\xa8\xddKFbU\xd9\x8f\f3\x1dgF\x1dZ\xa1\\xs') preadv(r1, &(0x7f0000000140), 0x391, 0x0) 13:19:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:15 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) [ 375.819433] binder_alloc: binder_alloc_mmap_handler: 13354 20001000-20004000 already mapped failed -16 [ 375.892842] binder: BINDER_SET_CONTEXT_MGR already set [ 375.898329] binder: 13354:13356 ioctl 40046207 0 returned -16 [ 375.972794] binder_alloc: 13354: binder_alloc_buf, no vma [ 375.978525] binder: 13354:13367 transaction failed 29189/-3, size 24-8 line 3035 [ 376.019633] binder: undelivered TRANSACTION_ERROR: 29189 [ 376.025486] binder: send failed reply for transaction 2 to 13354:13356 [ 376.032967] binder: undelivered TRANSACTION_COMPLETE [ 376.038156] binder: undelivered TRANSACTION_ERROR: 29189 13:19:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x604400, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000340)) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a130020020000000000000000000000"], 0x10}}, 0x0) flistxattr(r1, &(0x7f0000000240)=""/69, 0x45) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xddb, 0x400) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x17, 0x15, 0x16, 0x11, 0x4, 0x0, 0x6, 0x4a, 0xffffffffffffffff}) 13:19:16 executing program 1: 13:19:16 executing program 3: 13:19:16 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:16 executing program 4: 13:19:16 executing program 1: 13:19:16 executing program 3: 13:19:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:16 executing program 1: 13:19:16 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)) 13:19:16 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:16 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x7d000) 13:19:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x0, 0x0) 13:19:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:17 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3c6, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x101000, 0xb0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x301000, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9111) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = shmget$private(0x0, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) [ 377.063302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:19:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) dup2(0xffffffffffffffff, r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000840)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000580)='/dev/binder#\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) finit_module(r1, &(0x7f0000000000)='/dev/vbi#\x00', 0x0) 13:19:17 executing program 3: 13:19:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000540)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="dad70a9367e5630264db0e6d"], @ANYRES32=r2], 0xfffffffffffffefe}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000240)=""/22) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x401, 0x0) 13:19:17 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:17 executing program 3: 13:19:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) syncfs(r1) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x6) 13:19:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x6, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0x2c) 13:19:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:18 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000]}, 0xc}, 0x80, 0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) 13:19:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:18 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x6) 13:19:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="11ac9e0f414eeb6757bbd5768435591157ed848ab9ef5505e750af08d4fb", 0x1e, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x1ff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) sendmsg$key(r5, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003020600252000000200006ac00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df00002100080000020000007125d2929e63a0f5ccccc3b91b5f"], 0x80}}, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:18 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x9a80, 0x6, 0x187615e3, 0x3, 0x0, 0x7, 0x1000, 0x3, 0x1, 0x7, 0x0, 0x400, 0x3ff, 0xffffffff, 0xb098, 0x0, 0x0, 0x3, 0x10000, 0x6, 0x0, 0x8000, 0x2, 0x2, 0xffffffffffff8000, 0x3, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x5, 0x800, 0x8001, 0x0, 0x7f2, 0x4, @perf_bp={0x0, 0xa}, 0x20, 0x9, 0x0, 0x3, 0x1000, 0x8, 0x5}, r0, 0xc, 0xffffffffffffffff, 0x0) close(r1) unlink(&(0x7f0000000080)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)}, 0x6000000) r4 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) openat$cgroup_int(r3, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f0000001280), 0x4) close(r3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='memory.swap.current\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa, 0xffdc}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 13:19:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 13:19:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:18 executing program 4: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000200)={0x102c, 0x7fff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x200, 0x4) 13:19:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 378.822507] protocol 88fb is buggy, dev hsr_slave_0 [ 378.828255] protocol 88fb is buggy, dev hsr_slave_1 13:19:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:19:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:19:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) [ 379.052630] protocol 88fb is buggy, dev hsr_slave_0 [ 379.058470] protocol 88fb is buggy, dev hsr_slave_1 13:19:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x3, {0xa, 0x4e22, 0x8b, @local, 0x5}, r3}}, 0x38) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:19 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x4004556a, 0x8000000012) [ 379.370634] *** Guest State *** [ 379.374370] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 379.383499] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 379.392499] CR3 = 0x0000000000000000 [ 379.396284] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 379.402938] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 379.409679] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 379.415851] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 379.421988] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 379.428746] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.436911] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.445072] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.453223] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.461283] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.469526] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.477813] GDTR: limit=0x00000000, base=0x0000000000000000 [ 379.487516] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.495681] IDTR: limit=0x00000000, base=0x0000000000000000 [ 379.503907] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 379.512046] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 379.518523] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 379.526202] Interruptibility = 00000000 ActivityState = 00000000 [ 379.532584] *** Host State *** [ 379.535837] RIP = 0xffffffff812ff9c0 RSP = 0xffff8880967df340 [ 379.542010] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 379.548503] FSBase=00007f4c0875b700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 379.556540] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 379.562606] CR0=0000000080050033 CR3=000000008a348000 CR4=00000000001426f0 [ 379.569727] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 379.576647] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 379.582878] *** Control State *** [ 379.586395] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 379.593258] EntryControls=0000d1ff ExitControls=002fefff [ 379.598949] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 379.606095] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 379.612920] VMExit: intr_info=80000306 errcode=00000000 ilen=00000005 13:19:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x2, 0x14, 0x8, 0x9, 0x26, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_key={0x1f, 0x9, 0x748, 0x0, "4d4b2878cc2136fc2efed44a0057346fe02ab17ffcecc1db11aab766206409cb4132af6ab0ab7f275d0b8d9e9caed5e519b4628928041d6fdc0563f3427d19a348f69e124852dfbf533403e118eb6a5e7c98111c8e6313c416a69fe819bea6b99fb24902be1a518f51249e0313f4dd57d5ce6ad18d72a6728723e3445cf9b4f5beff340b75cd6a34ffbd81c9304f96bd01f03dc42b729bf99ec0336bdf52c0a6f07c193118b89878ad3b57827f76c90ec8cbe8f9b5c3e00af89ec2e16d74c2423e1ab1aae64736c51e287b86d1ba6650580db3ef4244724ea105a5f76fd5453091478f262045ad0cf6"}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@loopback, 0x1, 0x10, 0x4}]}, 0x130}}, 0x24004081) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x480000, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000540)='./file0\x00', 0x1400) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2082, 0x0) splice(r2, &(0x7f0000000300), r1, &(0x7f0000000440), 0xffffffff, 0xb) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000007c0)={0x0, 0x2, 0x0, {0x41, 0x7, 0x6, 0x1}}) r4 = open(&(0x7f0000000b80)='./file0\x00', 0x0, 0x86) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000340)=0xf7) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="8c2e027f58f40af81c13c944a2d1d24814e346e36ef4869c2a5ec5b781825c6759b0b1", 0x23) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000800)={0x3, 0xe0, "05479d801e620494455c2bf49e68f3748e4239c502197a579957040924805a8cb82016ad7177ac3ac9104c4d58b9490c04e4a1ddbde4672aadda994798277154716ceadd2008c3231e0248076450c8563685a6b1c09078fcdef39b55212923b26e5bc38d79444f3549015ae6304700640e99e71c80b87b4ade878551fb82fd8fe5ba500310b715fd781e1d961326c3abce01c629674b5be1b6fbf6c4355af68c7241f215c879b09f8baa751b29d183385570c145af5b0a870d64b58b8e47b82eb7cc703af0593ad93d275f3a0213301a04bc9d4f187a607d447574f72841797d"}) r5 = socket$key(0xf, 0x3, 0x2) syncfs(r5) sendmsg$key(r5, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000900)=""/119) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000700000000000000000000000000"], 0x10}}, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000600)={0x1, 0x3b}) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000380)={r6, @in={{0x2, 0x4e21, @rand_addr=0x5}}, 0xc7, 0x2, 0x6, 0x80000000, 0x10001}, &(0x7f00000002c0)=0x98) 13:19:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045565, 0x8000000012) 13:19:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) [ 379.619560] reason=80000021 qualification=0000000000000000 [ 379.626083] IDTVectoring: info=00000000 errcode=00000000 [ 379.631677] TSC Offset = 0xffffff305a2f9110 [ 379.636073] TPR Threshold = 0x00 [ 379.639485] EPT pointer = 0x000000009b8c401e 13:19:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045565, 0x0) 13:19:19 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:19 executing program 3: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 379.927790] input: syz1 as /devices/virtual/input/input10 [ 379.969470] input: syz1 as /devices/virtual/input/input11 13:19:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xc7}, {0x0}], 0x2, 0x0, 0x0, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 13:19:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 13:19:20 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045565, 0x0) [ 380.523628] input: syz1 as /devices/virtual/input/input12 13:19:20 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000010000000000000d300000000030006002520000002e6d6d82fd025d93b00006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02132000020600000000000000000000"], 0x10}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x7) 13:19:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xa, 0x3ff, 0x200000000007}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x0, 0x1}, 0x20) 13:19:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2, 0x3ff, 0x200000000007}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000780)={r0, &(0x7f0000000640), 0x0, 0x2}, 0x20) 13:19:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:21 executing program 3: syz_emit_ethernet(0x352, &(0x7f00003f3fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:19:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000003ff6)='GPL\x00'}, 0x48) 13:19:21 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='syzkaller0\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:21 executing program 4: 13:19:21 executing program 3: 13:19:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:21 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:21 executing program 4: 13:19:21 executing program 1: 13:19:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = getpid() sched_setparam(r2, &(0x7f0000000100)=0x9b) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x10}}, 0x0) 13:19:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:21 executing program 3: 13:19:21 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:21 executing program 4: 13:19:22 executing program 3: 13:19:22 executing program 1: 13:19:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x10001, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:22 executing program 3: 13:19:22 executing program 1: 13:19:22 executing program 4: 13:19:22 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:22 executing program 3: 13:19:22 executing program 1: 13:19:22 executing program 4: 13:19:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000010000000000000d300000000033fef2154159edb006ae00000010000000001000000080012000200020000000000fa0000004600000002030000000008c6a800000002000000000000000001020014bb5c93413a70f2e437cd00200000ffffffde0000000003000500dd2000000200006f204c6207c3b4ec299fe49aa0f3df0000210008000002002108000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:22 executing program 3: 13:19:22 executing program 1: 13:19:22 executing program 4: 13:19:22 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:23 executing program 3: 13:19:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000700)=""/162, 0xa2}], 0x2, 0x0) 13:19:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrandom(0x0, 0x0, 0x0) 13:19:23 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:23 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x408c5333, &(0x7f0000000080)) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0x6, 0x7fffffff, 0x4, 'queue0\x00'}) 13:19:23 executing program 3: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5503, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 13:19:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000240)="86862663501e9470d849472d147f8d33f5eb81257f0bec85c2d5a2206b1c5cd1e06fc64f90a4049576d4789cb096bf101d4ab21b7b51af467232adfd331064dfff6430f02adab42a716b2966f7f0d190f522c9de4919447be0d91ea3ad22bcde5633414f69275e75917beee823820027a0c2a5f130296e4d4aa98004b87cbe36b238b80a1e21ade2b8921b27688b0f", 0x8f) fsetxattr$security_selinux(r2, &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x3) 13:19:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x20000) 13:19:23 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc02123c123f3188b070") socket$bt_cmtp(0x1f, 0x3, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000004a0007031dfffd946f6105000a0080001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 13:19:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08"}) 13:19:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x20000) 13:19:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 383.961747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:19:24 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 13:19:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffbffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0xfd88) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) 13:19:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3ff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 384.439401] IPv4: Oversized IP packet from 127.0.0.1 [ 384.445470] IPv4: Oversized IP packet from 127.0.0.1 13:19:24 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x101000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x14) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) read$eventfd(r1, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001200), 0x0) 13:19:24 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x2011, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)) 13:19:24 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 384.993409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:19:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x20000) 13:19:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 13:19:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0x6, 0x8080) r1 = syz_open_dev$cec(&(0x7f0000000680)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = socket$key(0xf, 0x3, 0x2) r3 = creat(&(0x7f0000000700)='./file0\x00', 0x5) r4 = dup(r0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000380)=0x80000000) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x81, 0x100, 0x3, 0x1, 0xa3, 0x6, 0x5, 0x5, 0x1, 0x10000, 0x9}, 0xb) renameat2(r3, &(0x7f0000000300)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00', 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x14002, 0x0) write$selinux_attr(r5, &(0x7f0000000240)='system_u:object_r:tty_device_t:s0\x00', 0x22) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="021300000200d2c3abb4b68dfac2000076d4068ab5e966eda1e969d643c0e9e11d9b9c008c7b5485a5fb4a7202ad0786c9a2a4eb470992b785046728a432914ddbf87364ad1e3392d0c5e3ecc65f7b24634fb53fbd"], 0x10}}, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000003c0)=""/156, &(0x7f0000000480)=""/54, &(0x7f00000004c0)=""/166, 0x4004}) 13:19:25 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:25 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 13:19:25 executing program 1: clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) wait4(r0, 0x0, 0x80000009, 0x0) 13:19:25 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x20000) 13:19:25 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000100, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsync(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000010000000000000d300000000030006002520000002dd006ae0000001000000000100000008ec6d000200020000000000fa0000003000000002030000000000c6a80000000001020014bb00200000ffffffde000000000300050000200000020000f3df000021000800000200000079221fa28c7ceb752b4878c5c8a8b571300d"], 0x80}}, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) 13:19:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, &(0x7f0000003000)={0x77359400}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/28, 0x3c}, {&(0x7f0000000540)=""/26}], 0x304, 0x0) 13:19:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x407) 13:19:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:26 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:26 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) linkat(r0, 0x0, r0, &(0x7f0000000080)='./file1\x00', 0x400) pipe(&(0x7f0000000800)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'nr0\x00', 0x0}) sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000d40)=@can={0x1d, r4}, 0x80, &(0x7f0000001180)=[{&(0x7f0000004ac0)="1fe1de25cdace248e2e54081bc26b86fb0a62054a9bec5ce0d4a85eb5f6936a47fcb760b8ba0a77a8b7c8f6c58fe74500ea30e943dbd41ece6a582ca706fa59af07603f0e3bb4baa68a14c43e39799d8dd76b39097f9e3eda8aa96785f8514db74f87705ab04827680e60b4a4681495606b62518192f6b049f1bd23ab1ab5d41d7fb3c9dc8ed120971abe841e91dc841fe96f5f8ae2ff3efc38496c4d840ddbf1454ce353b3090c9488b948dde3a24a30827168803927a50e7289f1d3687b38645461d45c4e3a766a5e47733c82c749410595fc6a98a564d344bb80b8984a8562e040b3f541ce8ab79ccc6a698578b7aac9341df0349c523d5b1169da12f0aee9c6d096a83aaf5641987afda1a4eb7ad34b976bc2687bf90a0a844877a23955b7f60a9f81f48a2865f8580d8491f39d48d04484ac446a8856cc6e06bf13d179ed6d8fb80fbe9e908b273db7c8589a8a990bfcb1154b5ba545956083110cf48e021ab81cc913b358b428d8f8087a9555f5eb5f2ca622ce4d42c8b86ee118d17966e6074e0c1de9b4c914b265ac62c4ef20470faf43f9bf54cf816860a71abaff59f737913a8ef00be74a779a27bbb6f2acd8f22e01958ead0b82390e67582fd1fecf375e02b50b96de07a85eb2f753a9f37f9bfbd8082285d4c895fe35c62b7a06416b5682c77f822a32619ccd0f167fa7870f9d3a3cfeca3e3992d7adbacfc9de2a6b7602ec14b5beb1fbcaafbdc6a6e5aa3076aad21c44674a5c6ff8a3142a4af80cb81c69e5b70d235b16ce0abb421490a2e036ac7201749e1a48751dc9beee32f28b793c844648b7851253a76ae464e9d8adfcc4913acefda3c3f672849c88b6fe598be37fe9d3a9ad8c557c93ff98742002b8a560943d5c879efe9be4dd52ad5c17d6b09a76f50bcf8deed85dd263a7cf4b29e03cb81f1141596ca6bc73f690760deb08b465ded455a6aa20b848c6c5203100d8bdda9690b1fd9279096e3224494cee59ccf6bb7c46dd768bfd903d6120c8e1096555988b3b437978cb6119a749787ab938b9a0835cb480125a4b5375a0f63981f67bca73aebf10caeb17b4e46a535033399342e78270bb5005004c4f82ebbf3a91133848a3df332af62afb577e8cb4d54876a2aecd88f2bffc553fd0f47740b1ceb90bb8a413bf18802e3255549821f52729ae410883ddedd574882250e2b0059eb1a15a215f25444654ab357070e8ac2ad2d349eb5578d1fd67d81012c0b207dc79e457e2252e8ec24be59303a20732cdd69c855a1c30e2392dada732085c4138f14363127e91c0423b4ff35fdf09b880b7ef5cd909b20731557ff3419b5936ae09fb4f5766b39eaeba638ee1e944c43161f36f88ca7827deff599150ff6fbca70fcf63db37e64805647634af3ce6dabe3e7a5ae0d7a64e67fba819568d723a0df84b08f403df3b01a4328b16db75399dedc6420dc67ac7cd97f0a7127be8dee045157bf5f9d8eb2203cf83ad85a0cad16f2ae0a766c696c4e9aa97434694e76b2d4f389d035f2e3a02a69b37873ec043e8fb7d457122d58827a531e28ed520cf65633118a64eadb7a39ef3a863ded4cb5d73ad24d11cebfb3bfeebbc1b52f4e0822d2fa9e4088cfc385fe4c82f2aa7ced9ad4f7ea02fd9c0e6ec88834a4e79344274b6ddcf29faa11760a022ab44d09771a8c87566260ca4a71518915ca39af34fb58310cf8c3693ba0c6e4cdd7ec92081a3a8cbace3478e473e93819a9eb5686ece7b0e77565cf521aca5b937a00a239c1b8ef1ca00442a790c458fc91d1392cd4fbba45d8e62b26e8c2e173186269feccc90afae248783c87962cc27b42304247e884fa03f74360fcc49f3f0c5b5d59bb15c596c75c67b5f64e05c9e8f161079fa562410ef81f7de80e41fcdffcd910ba0abfd2d15a9698d8847916109253c1e6c9a2c663c1ded4d1c1f8532c21eb4025cf5a1d3f643ae03f311ef67ae7ff803a6277c67fc0316f6836d7870f09b7b8330eab89ca3f4e22c19545c18e0f950ca9251532db8bff8033c4120a53f7592e2937d4abbbd0f6f2949b192e2b0d39238dbda279aba7c615fec959989f8ce6dd689a0e899a1899e6bca1f3f0ed55b4304d985cdfa3ba59373da424598cd6c8bf4f428873f698f8aa2c8eebe1578e8fb670f2e0d938a427f7a6c6c2489819ddb721a28c56654bfb82251ddb9707834309b2c23f7633cd341e7575b4c00ebf5950793f742b7c80e638fa11d3963ad7cc5950f9c844fb48b2af194142d33694d449ac4eb3dda5f477dafe7d7718207fdc5dc04a4afcc68275d9c189f2306aa970302506a50a73e09a5edf42e8b7e11b253d98e42ef8acf28577d9790a780227fef22e44d8e32feb0fcc19dd6b40d585bb8bacbddee17baddf798c740db9ae924d24c37d7c2760340d7ad352ec005c5fedb0613ac23896974b30e2ce21571b78c3105d5f0ab3486a5a8504ba8a0ec7ed9509af63384e126adb1fe40924e69a6a434e0445835edd40c8c7ffc5d8c840201bf00bbd1f7b13a0aa6eb42eb99f2f6006aa42f748423a03ef994830db8c81484ed81053af851acf869c490aeab384998c5d433f7d0daaacb1a708ae8e5eab644545372927e9914cd2010256a44e96dc108d113f1568483eef4373713ed3a570c0a94567938cc4d11a609de0f1907b8a7ea827cb442d453ebefc6fed4b6e739aebb818a901a801b64196227e82f5133f74e1525d7af65413a77bc6df43f369642f9d979086e7dc4f68f7db5ada4a3daf9576956c8fb03c1246b7fd058b1d4c025434ee6644e0e83f08de3bcca6192148a0137fbc58029dd1788a6100c49c3e1bf8fd72d52689747adac3bcdb419a187ea6c8185bec038e618d9db42acab2f53077ec731a785fe9dcc0fc8b12d02cc09a4e4427df69da4c0a933e0ace5de4ad68849367e470f4e90019ee62a2c87a196825b7721fdd499db3b6433d3dfbd80938cadaf59f1e20c804e3ef4c2c071b3474249587c09d1e828af6fe8fee37fbdd2692807ff2194e0d7035960935bad7ed8227e24bd2bdf9d7c054407d7977f814be94306b664178fa795d347124ae5a2dcceb65f88cd57d29e8ee3ba7f514bcccdf98c5da1ba2753e07c2c0bd08b27a873daddbeb4b6e2cdb542966755272fbca190d56c1e0685532b1eb0841ef36f5c7bc32793b9370b7c0839de72124838834478538f7aeb404f4224951046c78c6c33c0d26424bb955748346f3a1271c171fd30a5385f63d68b06dda1a11c2e3784543553a6aef42d893f757934e78122d8cae4ab07fea170072973a750d2c25795c7079e2f37198b95e43851da8edb09068ae71d51aab6defb479d39b4c622396424c87cf1f79fefb6091cbe3b524f5473b50643052a63cb1be2cf9ab2d488d665ce3d1d578c8345352fc097ec7e5c23b1f3b5b3736fa57d7c95e5c9e4a672cfb91a01bd770e874ec24ac2165e2008359bf7311238f207566c9fce9f1924c44ab99dd6daa05f083ebb32e4b3632fbdc58ea48e7f2427fd732fdf6b4c74766e2ee8549c23422050dad93f1ae5bf58c5da990b3744a233c3c726d0219bf66a31a96c7a929d79671a409189c9e0f304760e22af2d9a5b7c83295a5dc7b214e7b7259c6b54aa0bf15a7797af725d7209ce02f7a997743a1aecf2b179cd69360f59234752cc1ca6dd7ecb4d1ea219c76d1c86394546eecb71afb0c33390742f9ea87c90e0f77893107aefb51411788c5161518c6b939fae997d8e8d8218d57f58550b5e18a948c0fbc8188bb526b03798a2c3acfe07739bae9bc1d546beb6b208f5fdca445f3ce561344f58b7fa19adb464036345b7a11778f093df0089b6d91e91bb7cee40898e42d3ef7f1c0fb78dfc94821d22c5eed9c1e3f915be9c4546cecd2cada112a32c4ff79aff251373240be5ff6ac1a7a2d9b637e0827f1252080a3e78b757b186dd6f8b9655a5c3ec1b57a60e776606f03f239e7e211db5c5b18e3c1e720d8cec5f025f40eeace43f174c0773d73d30c0b80286ad92b66ff66c75691a7ecad13b2d7126590aeb484f8b7e37dc77cfb65b97821dbe1d71a3c2609ef988ca0a27bb13770706f8f7a2ca86a1501a79c1962fd806e705f692b5b284aa98f5a5b1cf4a4ea2b706ce02fb5dcd008b2dd642b3a137627bcf320f6c878309e0489ab48c26baa52a21b61d9899358d120c88a161a0e79c403f86f5e1aedfcfedc8283bb2a9a8a768a6acebceb50928630560733145b3f20defd24ea6b28c06d30a405a302d6b5d072918d65678b392e28f2063649602d1cd7420d4fef829a6cbaf097c7f2ea161050a3b44956072103fda6fe869ea78d4c5f8362434ed00efa26fac4e30a74f476249b105c118e56f53bab3007cb1044c858f2049f968b5857aefd8735082e118dd6fecad9c2f5f324ff215b61f736ee1384d392c874ea9bd17a4570a5d2fb2a1c2bf37d752a6c6d69d2c37f794732796906154c0b9c7a24dd6fc75de6b9221228e7eb568f037bc52bd90af4d3609653ba578708b7c215d2623d280926f6a7ea63dc8edd42923e4af80298de1a347a85a55fd654681c827de09a2ed702a04c1527c0543a86e7e0041117a33cbcb61431625e638b5c13e1d6e33c12e09cbf2317c0a99a4f8feee4b3eda7ff857cdcbcbf72eec6fd78d0871b990acd37f904a074711262c1afe9cbc8daa3ee4c12d86979204d41ab4fb7e7f13cbbcc8a071f82d5cb4450435dbc2e99561bf82623d0a79333077f84d5b17d7b28bf16bd5b398f10bd774b433cd1d649b74e5b170163a3928f96feeff0fa4398dab0749d74cece2fa879de30d08a2965fcb9f1a5dfa9c53412ff3ccedad043502f51f29b4d3e38586e77f0e490fc113b9b1be29b69f2394a7d01125156f5cad256d3c5b7078537a8b84b053c8caf7af94f29b9236fdf6ec9c644b3a919689b2ee285a23a59cb6ceaf515ef51811186987e87364739ff21ba86872a7f96af3289946c73bf3061a140a2cf3e934139e4ea89c0a13e1baf354bd4b4c99017081e83b776534848e8870f628e4fa0870c29583b6295e352077d64776a81c1dc9de5ca", 0xe00}], 0x1}, 0x800) write(r2, &(0x7f0000000300), 0xffffff7e) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000007c0)=0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/loop-control\x00', 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_GETVERSION(r6, 0x80047601, &(0x7f0000000a80)) quotactl(0xb7, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000840)="39898e73bb5d5f9bb478b97628c7be66edd162dc0446ef1762239b1f2281e5db2f16ed53868367b63272e31bf96cc1d83985e895fb91400619754d0d5134de6735832ef057b4489b551bbacd40bb") ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0xb5) getsockopt$inet_buf(r1, 0x0, 0x2e, 0x0, &(0x7f0000000300)) ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0x81, 0x4, 0xfffffffffffffffa, 0x68c7}, {0x5, 0x2, 0x5}]}) write$binfmt_elf64(r5, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x1, 0x0, 0x5, 0x2}) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000600)=""/246, 0xf6}], 0x3, 0x0) 13:19:26 executing program 4: 13:19:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 13:19:26 executing program 1: 13:19:26 executing program 4: 13:19:26 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0200"], 0x10}}, 0x0) 13:19:26 executing program 1: 13:19:26 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:26 executing program 4: 13:19:27 executing program 1: 13:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xfffffffffffffe8e}}, 0x0) 13:19:27 executing program 4: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) openat(0xffffffffffffffff, 0x0, 0x20000, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) 13:19:27 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000003, 0x2) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000000)) 13:19:27 executing program 1: r0 = socket(0x880800000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800040001000000", 0x24) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22, 0x0, @rand_addr, 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = dup2(r3, r3) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000) fcntl$lock(r1, 0x0, 0x0) 13:19:27 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 13:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) epoll_wait(r2, &(0x7f0000000240)=[{}, {}], 0x2, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021300000200000000000000000000a5"], 0x10}}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 13:19:27 executing program 4: syz_emit_ethernet(0x140, &(0x7f0000000040)={@local, @empty=[0x7, 0x2, 0x32010000], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 13:19:27 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x2880, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000380)={0x9, 0x7ff, 0x4}) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x10000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x100000, 0xbc, &(0x7f0000000240)=""/188}]}) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 387.818165] dccp_invalid_packet: P.Data Offset(0) too small 13:19:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) [ 387.890378] dccp_invalid_packet: P.Data Offset(0) too small 13:19:28 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f00000001c0)=[{r1}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) open(&(0x7f0000000680)='./file0\x00', 0x10000, 0x0) 13:19:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000600)=""/112, 0x70}], 0x1, 0x0) 13:19:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x2008000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:19:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e0000001d008183ad5de087185082cf0124b0eba0070060002339a00576f9835b3f00009148700000f85ac47c45", 0x2e}], 0x1}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 13:19:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006916"], 0x0}, 0x48) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 13:19:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0xfffffffffffffed5}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = dup3(r0, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000440)={@mcast1, 0x10001, 0x2, 0x101, 0x4, 0x76, 0x2}, &(0x7f0000000480)=0x20) r4 = mmap$binder(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x2000000, 0x110, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x0, 0x3d}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000000240)=[0x38, 0x30]}, 0x100000001}}, @register_looper], 0xea, 0x0, &(0x7f0000000300)="8e07e26b281c77f16ae1b154b58ccf0a2c47486506c660eb95315adbda980ad5b8340620f402bcb1252e811ae00a13f180e689915f77c7aace1bd102d68253c10b8dc8c0f7369551d2ffdee8645ea95c8156e7955d74758b7b2675899bbcb30bb5b431a10a6e61004e61a96ad6e6d97c452879cbe6ab965358ce4fe15e46655dea5e2aef134eef2c750e3bfd62d0c15fba8290980e301eca618024cba9c74c4785760a3a5b968d598acc2f03b4b7c440316ea94f1a190a98901d451fbc47c3b42c33cdfff625d9f6bd8d80484c72eafb4e2256804878a143cfa7f54391a9b45c78470f241b873a05c27a"}) 13:19:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 388.541083] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.618561] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.645823] device nr0 entered promiscuous mode 13:19:28 executing program 5: openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x400000000000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2ca7b7b5cf"], 0x5) 13:19:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000500c745b7efa45f19760c5b9c1f499b00000000000000006c861e"], 0x1e}, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000a40)='syz0\x00', 0x200002, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x800000000080000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 13:19:28 executing program 2: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:19:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x208400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x10000, 0x0) bind$isdn_base(r2, &(0x7f0000000440)={0x22, 0x7, 0xfffffffffffffe00, 0x1, 0xdabb}, 0x6) write(r0, &(0x7f0000000500)="1a8c75d7b073c458a127baead87c732f495de4517ffc93a6901759e3ce7c6206d5f547d6a74697abefd066798c60a8", 0x2f) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000000c6a8000000020000000008e1b792ab000000000001020014bb00200000ffffffde8b662552900adce4a31f31275ae2ba9a0000000003000500002000001e9c45eb80145353b5067c12f15beddbbe78"], 0x80}}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x4}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000380)={r4, 0xbb7}, &(0x7f00000003c0)=0x8) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 389.261862] device nr0 entered promiscuous mode [ 389.282866] device nr0 entered promiscuous mode 13:19:29 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00\xaat{\x04\x91v\xf4\x93\x82A6\x88\xf7\"\x1a\xe3\xa3\xd0\xd3K\x0f\x839\x05\xe0\x1d\xc1yhBLz\x0fC\x9a\xe4\xf8\xfcmdL9\"R\xd5\xb3\xc8\x10\x98\'\xfcy\xafY&\xdb\x90\xa4\xcc[\xfb\xc3\x96\x878\x9e\x89\x99\xcb=\xf9\xb5\xe62\x9f\xd3]\x17Q\xa8\xa5\x94W\xa66\xc3\x17r\x7f\x16\xfa\x1a\xaeC\x88\a\xbdf\x0f\xfb\x85\xbc\x8d\x9c\x9aIyv\xec0\x878\xc4\xda\xe9\xa8\xd9J\x8f\x8d\xb5\x94c\xbeX\x82\xf6\n+\x81\xab{Uc\xe4y=\xd7', 0x8d) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) 13:19:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f00000000c0)="0ada08394d053f3188b070") syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) 13:19:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000003ff6)='GPL\x00'}, 0x48) 13:19:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:30 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x4, 0x0, 0x0, r0, 0x800000000000004}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000140), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)={r2, 0x98, "8ebd9e9b4b15f4a62b5fea0cfd3d76c27c7b5bb8b0d8215f82e9a2c822545b06dcb3699ee931c5e5aa84d27a180e3ef7bac241c6da884875f788da20d4c50b7a1a6b57058a3f3d55f75361643a2d8b7ac7e470c4442b091deabbaab80f22e76b694c38e2db803de1d4b3f74fbaf7b48542cb75f203dfd2b80f26933bde1de8c6592967ec667710bc822f95d096a994eab285ffcb0c6cd908"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0), 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000ac0)="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") unshare(0x40000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 13:19:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xdb\xf9\xbc\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:30 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) [ 390.396840] IPVS: ftp: loaded support on port[0] = 21 13:19:30 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xe6) signalfd(r0, &(0x7f0000000280), 0x8) 13:19:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:31 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) lgetxattr(&(0x7f0000000200)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0/file0/../file0/file0\x00', 0x0, 0x0) 13:19:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:19:31 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000107c) 13:19:31 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 391.339122] IPVS: ftp: loaded support on port[0] = 21 13:19:32 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x4, 0x0, 0x0, r0, 0x800000000000004}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000140), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)={r2, 0x98, "8ebd9e9b4b15f4a62b5fea0cfd3d76c27c7b5bb8b0d8215f82e9a2c822545b06dcb3699ee931c5e5aa84d27a180e3ef7bac241c6da884875f788da20d4c50b7a1a6b57058a3f3d55f75361643a2d8b7ac7e470c4442b091deabbaab80f22e76b694c38e2db803de1d4b3f74fbaf7b48542cb75f203dfd2b80f26933bde1de8c6592967ec667710bc822f95d096a994eab285ffcb0c6cd908"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0), 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000ac0)="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") unshare(0x40000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 13:19:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) 13:19:32 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) chdir(&(0x7f0000000000)='./file0\x00') 13:19:32 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:32 executing program 2: 13:19:33 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 13:19:33 executing program 2: 13:19:33 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) chdir(&(0x7f0000000000)='./file0\x00') 13:19:33 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 13:19:33 executing program 2: 13:19:34 executing program 5: 13:19:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) chdir(&(0x7f0000000000)='./file0\x00') 13:19:35 executing program 3: 13:19:35 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 13:19:35 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:35 executing program 2: 13:19:35 executing program 5: 13:19:35 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) chdir(&(0x7f0000000000)='./file0\x00') 13:19:35 executing program 5: 13:19:35 executing program 2: 13:19:35 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:35 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:35 executing program 3: 13:19:35 executing program 5: 13:19:35 executing program 2: 13:19:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:35 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:35 executing program 5: 13:19:35 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:35 executing program 3: 13:19:35 executing program 2: 13:19:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:36 executing program 5: 13:19:36 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:36 executing program 2: 13:19:36 executing program 3: 13:19:36 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:36 executing program 2: 13:19:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:36 executing program 5: 13:19:36 executing program 3: 13:19:36 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:36 executing program 2: 13:19:36 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:36 executing program 3: 13:19:36 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:36 executing program 2: 13:19:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') read(r0, 0x0, 0x0) 13:19:37 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:37 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 13:19:37 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="720af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf13000000000000850000002d000000b7000000000000009500000000000000"], 0x0}, 0x48) 13:19:37 executing program 2: 13:19:37 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:37 executing program 3: 13:19:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x20000015001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x1c6, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 13:19:37 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x28e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "e96b4b8fdd5fd9b1"}, 0x10}}, 0x0) 13:19:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:19:38 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) [ 398.059320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.066456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:19:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) 13:19:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') [ 398.190217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:19:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) [ 398.332358] protocol 88fb is buggy, dev hsr_slave_0 [ 398.337906] protocol 88fb is buggy, dev hsr_slave_1 [ 398.344094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:19:38 executing program 0: fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 398.443868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:19:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='./file0/bus\x00', 0x0, 0x0) [ 398.582340] protocol 88fb is buggy, dev hsr_slave_0 [ 398.587999] protocol 88fb is buggy, dev hsr_slave_1 [ 398.593986] protocol 88fb is buggy, dev hsr_slave_0 [ 398.599652] protocol 88fb is buggy, dev hsr_slave_1 13:19:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x7d}], 0xb0a0edab330b095, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 13:19:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x0, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:38 executing program 0: fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x0, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:19:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) 13:19:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) 13:19:39 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:39 executing program 0: fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000007ec0)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x11\x00') 13:19:39 executing program 4: mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:39 executing program 0: r0 = memfd_create(0x0, 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x0, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x5b) write$FUSE_DIRENTPLUS(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='B'], 0x1) 13:19:39 executing program 4: mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:39 executing program 0: r0 = memfd_create(0x0, 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 399.852553] protocol 88fb is buggy, dev hsr_slave_0 [ 399.858427] protocol 88fb is buggy, dev hsr_slave_1 13:19:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 13:19:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x0, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000007ec0)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x11\x00') 13:19:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)) 13:19:40 executing program 4: mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:40 executing program 0: r0 = memfd_create(0x0, 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:40 executing program 2: 13:19:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x0, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) [ 400.583974] ptrace attach of "/root/syz-executor.2"[14305] was attempted by "/root/syz-executor.2"[14306] 13:19:40 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:40 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:40 executing program 3: 13:19:40 executing program 5: 13:19:40 executing program 2: 13:19:41 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x0, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:41 executing program 5: 13:19:41 executing program 3: 13:19:41 executing program 2: 13:19:41 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:41 executing program 0: memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(0xffffffffffffffff, 0x2040000000003, 0x800000001, 0x2) r0 = open(0x0, 0x0, 0x0) r1 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r5 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:41 executing program 3: 13:19:41 executing program 5: 13:19:41 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:41 executing program 2: 13:19:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:41 executing program 5: 13:19:41 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:41 executing program 3: 13:19:42 executing program 2: 13:19:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:42 executing program 3: 13:19:42 executing program 5: 13:19:42 executing program 2: 13:19:42 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:42 executing program 2: 13:19:42 executing program 3: 13:19:42 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:42 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x4000000a, r1, 0x0) read(r2, &(0x7f0000000000)=""/64, 0x18) 13:19:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000055, 0x0, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 13:19:42 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) 13:19:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:43 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) close(r0) [ 403.142521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:19:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:43 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) 13:19:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) 13:19:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 403.829257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:19:44 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:19:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:44 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x5, &(0x7f0000000640)={0x0, 0x3}) 13:19:44 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc4c85513, &(0x7f0000000380)={0x0, 0xffffffff00000002}) 13:19:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 13:19:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) [ 405.021907] device team0 entered promiscuous mode [ 405.026840] device team_slave_0 entered promiscuous mode [ 405.032914] device team_slave_1 entered promiscuous mode [ 405.041907] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.109829] device team0 left promiscuous mode [ 405.114678] device team_slave_0 left promiscuous mode [ 405.120304] device team_slave_1 left promiscuous mode 13:19:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000080)="02") 13:19:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:45 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:45 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:45 executing program 2: syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1004000000016) 13:19:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:19:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:45 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) 13:19:45 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:45 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xc0ff7f}, 0x3000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xeffdffff}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x73, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 13:19:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff}, 0x48) 13:19:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 13:19:46 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:46 executing program 3: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b02fc73cb00040efb7ee236bec5def00ffffffffffffffb960b10002000000000000fa004629820300000000000000096c8ffc7c"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:19:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff}, 0x48) 13:19:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:19:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') [ 406.602472] ptrace attach of "/root/syz-executor.3"[14553] was attempted by "/root/syz-executor.3"[14555] 13:19:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x4004556b, 0x8000000012) 13:19:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', 0x0) chdir(&(0x7f0000000000)='./file0\x00') 13:19:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff}, 0x48) 13:19:46 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 13:19:47 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:47 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:47 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', 0x0) chdir(&(0x7f0000000000)='./file0\x00') 13:19:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000200)=""/226, 0xe2}, {0x0}], 0x3, 0x0, 0x0, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 13:19:47 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:47 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:47 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', 0x0) chdir(&(0x7f0000000000)='./file0\x00') 13:19:47 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:47 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) syz_open_dev$midi(0x0, 0x3, 0x2803) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00\xaat{\x04\x91v\xf4\x93\x82A6\x88\xf7\"\x1a\xe3\xa3\xd0\xd3K\x0f\x839\x05\xe0\x1d\xc1yhBLz\x0fC\x9a\xe4\xf8\xfcmdL9\"R\xd5\xb3\xc8\x10\x98\'\xfcy\xafY&\xdb\x90\xa4\xcc[\xfb\xc3\x96\x878\x9e\x89\x99\xcb=\xf9\xb5\xe62\x9f\xd3]\x17Q\xa8\xa5\x94W\xa66\xc3\x17r\x7f\x16\xfa\x1a\xaeC\x88\a\xbdf\x0f\xfb\x85\xbc\x8d\x9c\x9aIyv\xec0\x878\xc4\xda\xe9\xa8\xd9J\x8f\x8d\xb5\x94c\xbeX\x82\xf6\n+\x81\xab{Uc\xe4y=\xd7', 0x8d) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) 13:19:48 executing program 5: r0 = syz_open_dev$dspn(0x0, 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(0x0) 13:19:48 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:48 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x18) 13:19:48 executing program 5: r0 = syz_open_dev$dspn(0x0, 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:48 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x18) 13:19:48 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(0x0) 13:19:48 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:52 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) 13:19:52 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:52 executing program 5: r0 = syz_open_dev$dspn(0x0, 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xa, 0x3ff, 0x200000000007}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x18) 13:19:52 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chdir(0x0) 13:19:52 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:53 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:53 executing program 3: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 412.944607] audit: type=1326 audit(1552828792.997:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14677 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:53 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fchmod(r0, 0x0) 13:19:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:19:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) [ 413.158384] audit: type=1326 audit(1552828793.207:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14686 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 [ 413.284911] input:  as /devices/virtual/input/input21 13:19:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 413.710484] audit: type=1326 audit(1552828793.757:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14677 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:53 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:19:53 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 13:19:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 13:19:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 413.840097] input:  as /devices/virtual/input/input23 13:19:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 413.928191] audit: type=1326 audit(1552828793.977:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) [ 414.026402] audit: type=1326 audit(1552828793.997:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14686 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:54 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:54 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rmdir(&(0x7f0000000080)='./file0\x00') 13:19:54 executing program 1: 13:19:54 executing program 5: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 414.386494] audit: type=1326 audit(1552828794.437:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14737 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 [ 414.712018] audit: type=1326 audit(1552828794.767:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:54 executing program 2: 13:19:54 executing program 1: 13:19:54 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:54 executing program 5: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:54 executing program 1: 13:19:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:55 executing program 1: [ 415.143379] audit: type=1326 audit(1552828795.197:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14737 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:19:55 executing program 4: 13:19:55 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:55 executing program 2: 13:19:55 executing program 5: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000800c5011, &(0x7f0000000000)) 13:19:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:55 executing program 1: 13:19:55 executing program 2: 13:19:55 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:55 executing program 4: 13:19:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:55 executing program 1: 13:19:55 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 13:19:55 executing program 4: 13:19:55 executing program 2: 13:19:56 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:56 executing program 1: 13:19:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:56 executing program 4: 13:19:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 13:19:56 executing program 2: 13:19:56 executing program 1: 13:19:56 executing program 4: 13:19:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:56 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:56 executing program 1: 13:19:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 13:19:56 executing program 2: 13:19:56 executing program 4: 13:19:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:56 executing program 1: 13:19:57 executing program 2: 13:19:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, 0x0) 13:19:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:57 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:57 executing program 1: 13:19:57 executing program 4: 13:19:57 executing program 2: 13:19:57 executing program 1: 13:19:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, 0x0) 13:19:57 executing program 4: 13:19:57 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:57 executing program 1: 13:19:57 executing program 2: 13:19:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:57 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x80000000005, 0x4a}, 0xfea0) 13:19:58 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:58 executing program 1: clone(0x2102001fdc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000400)='user\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000300)="9950cb3e9b96111778670b4833ecf5affa66a4bcc89ce2506b7b1858a24425bce6198a03acb5039ab61db116638e0950c8fd94318c28d67ee3eca620b3616ec5c86b84f3999610de62e23dcf5a8b9d277a4c2a61d3a25e1d9fac4124f82dfe5af94392fe88a881ba53877a7965518178a8d4e49810cf968b437f846baa1bb730af9674bbf497eacbb13fa4d7c46eff7cffd2ab01b33de75887155921c78998e94ace465d6cac3c97e355e0c9a4bb193d6a9767ca7cc30a041ad66dec972fa1086ff4d56c631b43ffc81e84c8214d877a89c7554e955ee1bcee5def1d8afc3d9f2552995e95ebd31c7bfcf79a21bac3d5c2e11573e430", 0xf6, r0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/201, 0xc9) prctl$PR_CAPBSET_READ(0x17, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)='\xd1?\xf3\xd7v', 0x0) 13:19:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) ioctl$int_in(r0, 0x800000800c5011, 0x0) 13:19:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendfile(r0, r0, 0x0, 0x20) sendfile(r0, r0, &(0x7f0000000100), 0x7f8) fcntl$setstatus(r0, 0x4, 0x400) 13:19:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:58 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa02070000000086dd60b4090000303a000200000000000000010000000100000024000000000000000000000000000001820090780009290060b680fa0000000000000000000000000203ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 13:19:58 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e64c0c2459214"], 0x1) 13:19:58 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:19:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c83115ab7, 0x0) 13:19:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r1, 0x0, 0x2000, 0x40) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18}, 0xff9c) fallocate(r1, 0x3, 0x0, 0x8001) 13:19:58 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) fsetxattr$security_selinux(r0, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 13:19:59 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'system.', '\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 13:19:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, 0x0) dup3(r0, r1, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 13:19:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfd3e, 0x200007fb, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 13:19:59 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:19:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr="2ccf1cfb428fed5bc08b5934e79bce70"}, 0x1c) 13:19:59 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:19:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:19:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup2(r0, r0) 13:19:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x0, 0x3) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:20:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6101c00}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x2c}], {0x95, 0x0, 0x1018}}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 13:20:00 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x400000000008, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="18ff0300000000000000000000000000"], 0x0, 0xffffffffffff7aa6, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 13:20:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) 13:20:00 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x4788, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 13:20:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x0, 0x0) close(r0) 13:20:00 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="0adc1f123c123f3188b070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x1100000000000000, 0x80, &(0x7f0000000100)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x0, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, 0x0}, 0x280) 13:20:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="ad", 0x1}], 0x1, 0x0) 13:20:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x666f) 13:20:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(r1, &(0x7f0000000100)='./file0\x00', 0x514, 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb}, 0xb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) 13:20:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x0, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x0, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(&(0x7f0000000200)='/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3\xa5\xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xb1$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8dg?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\xf5\xa7\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&D\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\xd17\xf1\x97G\xa0g\xb5\xde\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e\xa7\x91N\xa3\x93\xe5&H\x7f\x1d\xd9\xa8)', 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 13:20:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:01 executing program 1: 13:20:01 executing program 1: 13:20:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x0, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:02 executing program 4: 13:20:02 executing program 2: 13:20:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:02 executing program 1: 13:20:02 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:02 executing program 5: 13:20:02 executing program 2: 13:20:02 executing program 1: 13:20:03 executing program 5: 13:20:03 executing program 4: 13:20:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:03 executing program 1: 13:20:03 executing program 2: 13:20:03 executing program 5: 13:20:03 executing program 4: 13:20:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:03 executing program 1: 13:20:03 executing program 5: 13:20:03 executing program 4: 13:20:03 executing program 2: 13:20:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:03 executing program 5: 13:20:03 executing program 1: 13:20:04 executing program 4: 13:20:04 executing program 2: 13:20:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:04 executing program 5: 13:20:04 executing program 4: 13:20:04 executing program 1: 13:20:04 executing program 2: 13:20:04 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:04 executing program 5: 13:20:04 executing program 4: 13:20:04 executing program 1: 13:20:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:04 executing program 2: 13:20:04 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:04 executing program 4: 13:20:04 executing program 5: 13:20:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:05 executing program 2: 13:20:05 executing program 1: 13:20:05 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d83") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:05 executing program 2: 13:20:05 executing program 4: 13:20:05 executing program 5: 13:20:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:05 executing program 1: 13:20:05 executing program 2: 13:20:05 executing program 4: 13:20:05 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d83") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:05 executing program 1: 13:20:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:05 executing program 5: 13:20:05 executing program 1: 13:20:05 executing program 2: 13:20:05 executing program 4: 13:20:06 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d83") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:06 executing program 5: 13:20:06 executing program 2: 13:20:06 executing program 1: 13:20:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00\xec\x92]\x0eC\xd2\xde\xe1\xd4\xe7\x86~I\xfeo\x8b\xeb\"\x85\xeb\xffv\xc6H.\xad\xee\xc5\xe7\xf9\xcf\b\xe4s\xad\xb1E\x80\x01\xa3\b\xcbOh\x90\xbenf\xe0 \xd2\x03`\xd0\b\xc2\xbc\xca \x82\x81cN\x9c\b;\xba\x95\x88\x12(\b\x06\xaf\xdb\xef\v\xecpP\xc6j\'\xf9\xdf\xca\x9e\x83\xbd_h_D\x02\xbf\x14\xf8\xfdN\xa2p\xb7^\xa7\x84E~\x15\x82\xcfB|2\to\x9e\xcep\x94I\xb9)pTYE\xe49q\x15\x91\xab~\xcbg7%\xb0\x02\t!\x87\xefm\xb2\xe8\xa1\x1dg%\xc4\x86XU\xc60\xfb\x9c\x90\xc1\xc2&\'3\xca!0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 13:20:06 executing program 5: r0 = socket(0x2, 0x8001, 0x0) connect$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="82022e2f66696cc0fae518f7f86a0150653000"], 0x1) shutdown(r0, 0x1) 13:20:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 13:20:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='c\xce\xecoup.\x12\n\xfd\x1f\x1b5\n\xcb\x06\x00\x00\x00%G\xd8\xd6\xe9\t=\x1d\x90\r\x92\x8cSykw', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6da2921662954e11ecb0ad0baa5fa79c890111417711e2ae5336807caa9eed54c016392a748948db63f5c17a8fa1844e14270b42c050577e291d991287e40e68b39d1d0261c2cfdfde3753e2d000dc84dff2233de5129e351863acd6"], 0x5c) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 13:20:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@allocspi={0xf8, 0x15, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [], @multicast2}}, {@in6=@rand_addr='\x00\x00\n\x00'}}}}, 0xf8}}, 0x0) 13:20:06 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22f") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='c\xce\xecoup.\x12\n\xfd\x1f\x1b5\n\xcb\x06\x00\x00\x00%G\xd8\xd6\xe9\t=\x1d\x90\r\x92\x8cSykw', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6da2921662954e11ecb0ad0baa5fa79c890111417711e2ae5336807caa9eed54c016392a748948db63f5c17a8fa1844e14270b42c050577e291d991287e40e68b39d1d0261c2cfdfde3753e2d000dc84dff2233de5129e351863acd6"], 0x5c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 13:20:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000a00)) 13:20:07 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000040000000000000010000000000000002055037cd32103f70b89e00be49aa15500000000000000"], 0x1, 0x0) 13:20:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:20:07 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000080)="660ff4cc2d2d05090065670f688b0c00004b0f642be20092f2582f899e2f899e5c5acd00c4c299020e660fe2df8c31c4e2c18e1d000000000f71e600c1e39d0f69c6b85d5d00f9c4c475acc4c1f970d226a6c4c161d9f8c4c2692990f0ffff1fc3f2a5") ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 13:20:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22f") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:07 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:20:07 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) 13:20:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x400000000401) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, 0x0) 13:20:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22f") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:07 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb00, 0x4500}) [ 427.532486] protocol 88fb is buggy, dev hsr_slave_0 [ 427.538201] protocol 88fb is buggy, dev hsr_slave_1 13:20:07 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 13:20:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x400000000401) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, 0x0) [ 427.692625] protocol 88fb is buggy, dev hsr_slave_0 [ 427.698462] protocol 88fb is buggy, dev hsr_slave_1 [ 427.704694] protocol 88fb is buggy, dev hsr_slave_0 [ 427.710519] protocol 88fb is buggy, dev hsr_slave_1 13:20:07 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x400000000401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, 0x0) 13:20:07 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc88") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 428.332215] protocol 88fb is buggy, dev hsr_slave_0 [ 428.337742] protocol 88fb is buggy, dev hsr_slave_1 [ 428.732529] protocol 88fb is buggy, dev hsr_slave_0 [ 428.738047] protocol 88fb is buggy, dev hsr_slave_1 [ 433.132410] net_ratelimit: 20 callbacks suppressed [ 433.132431] protocol 88fb is buggy, dev hsr_slave_0 [ 433.143132] protocol 88fb is buggy, dev hsr_slave_1 13:20:13 executing program 4: pipe(0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 13:20:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48) 13:20:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400000000001001, 0x0, 0x44ff}) 13:20:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 13:20:13 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x400000000401) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) 13:20:13 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc88") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:13 executing program 5: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r2 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:13 executing program 2: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x0, 0xff) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) 13:20:14 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc88") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 13:20:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000)) [ 434.588307] device team0 entered promiscuous mode [ 434.593807] device team_slave_0 entered promiscuous mode [ 434.603205] device team_slave_1 entered promiscuous mode [ 434.637814] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.157592] device team0 entered promiscuous mode [ 435.162783] device team_slave_0 entered promiscuous mode [ 435.168516] device team_slave_1 entered promiscuous mode [ 435.176641] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.212625] device team0 left promiscuous mode [ 435.217323] device team_slave_0 left promiscuous mode [ 435.223101] device team_slave_1 left promiscuous mode [ 435.243425] device team0 entered promiscuous mode [ 435.248374] device team_slave_0 entered promiscuous mode [ 435.254420] device team_slave_1 entered promiscuous mode 13:20:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x80000000005001, 0x0) 13:20:15 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004480)) inotify_init1(0x0) pipe(&(0x7f0000000540)) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, 0x0) getegid() getgid() [ 435.263302] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.276711] device team0 left promiscuous mode [ 435.281607] device team_slave_0 left promiscuous mode [ 435.287213] device team_slave_1 left promiscuous mode 13:20:15 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/bnep\x00') 13:20:15 executing program 1: r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 13:20:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2008000000000b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000000000)) 13:20:15 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x10000) 13:20:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) 13:20:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) 13:20:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0xff) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) 13:20:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cstype3={0x5, 0xf}], 0x1) 13:20:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:16 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', 0x0, 0x0, 0x0) [ 436.939047] audit: type=1326 audit(1552828816.987:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15404 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:17 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000140)={0x9a0000, 0x100, 0x0, [], 0x0}) 13:20:17 executing program 1: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x91b100e3c12c1810) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 13:20:17 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, [], 0x0}) 13:20:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a", 0x8a, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(r1, &(0x7f00000004c0)='memory.swap.max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) times(0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000002c0), 0x1) socket(0x1e, 0x4, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x7ffffffffffff18, 0xffc99a3b, &(0x7f0000007740)={0x77359400}) socket(0x9, 0x80000, 0xffff) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x8}}, 0x403, 0x800, 0x4, 0x0, 0x80}, &(0x7f0000000300)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaaaa0000000000000000100900003809000080090000616d6f6e670000000000000000000000000000000000000000000000000000007c080000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e0000001726564697265637400000000000000000000000000000000000000000000000004000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0xa88) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) 13:20:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 13:20:17 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 437.525108] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 437.530889] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 [ 437.680299] audit: type=1326 audit(1552828817.727:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 437.790933] audit: type=1326 audit(1552828817.757:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15404 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 [ 437.899707] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 13:20:18 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setpgid(0x0, 0x0) 13:20:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:18 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) 13:20:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a", 0x8a, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(r1, &(0x7f00000004c0)='memory.swap.max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) times(0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000002c0), 0x1) socket(0x1e, 0x4, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x7ffffffffffff18, 0xffc99a3b, &(0x7f0000007740)={0x77359400}) socket(0x9, 0x80000, 0xffff) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x8}}, 0x403, 0x800, 0x4, 0x0, 0x80}, &(0x7f0000000300)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaaaa0000000000000000100900003809000080090000616d6f6e670000000000000000000000000000000000000000000000000000007c080000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e0000001726564697265637400000000000000000000000000000000000000000000000004000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0xa88) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) [ 438.182878] audit: type=1326 audit(1552828818.227:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15461 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) [ 438.252829] audit: type=1326 audit(1552828818.297:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15459 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 [ 438.347977] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 13:20:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 438.476962] audit: type=1326 audit(1552828818.527:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a", 0x8a, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(r1, &(0x7f00000004c0)='memory.swap.max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) times(0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000002c0), 0x1) socket(0x1e, 0x4, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x7ffffffffffff18, 0xffc99a3b, &(0x7f0000007740)={0x77359400}) socket(0x9, 0x80000, 0xffff) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x8}}, 0x403, 0x800, 0x4, 0x0, 0x80}, &(0x7f0000000300)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaaaa0000000000000000100900003809000080090000616d6f6e670000000000000000000000000000000000000000000000000000007c080000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e0000001726564697265637400000000000000000000000000000000000000000000000004000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0xa88) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) 13:20:18 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00'}, 0x118) [ 438.724154] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 [ 438.811365] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.818458] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.825540] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.832551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.839416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.846420] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.853396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 13:20:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a", 0x8a, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(r1, &(0x7f00000004c0)='memory.swap.max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) times(0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000002c0), 0x1) socket(0x1e, 0x4, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x7ffffffffffff18, 0xffc99a3b, &(0x7f0000007740)={0x77359400}) socket(0x9, 0x80000, 0xffff) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x8}}, 0x403, 0x800, 0x4, 0x0, 0x80}, &(0x7f0000000300)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000697036746e6c300000000000000000007465716c3000000000000000000000006272696467655f736c6176655f3100006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaaaa0000000000000000100900003809000080090000616d6f6e670000000000000000000000000000000000000000000000000000007c080000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f0000010000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000e0000001726564697265637400000000000000000000000000000000000000000000000004000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000001f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0xa88) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) [ 438.860268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.867215] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.874140] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.881004] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.913328] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 438.973558] audit: type=1326 audit(1552828819.027:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15461 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fchmod(r0, 0x0) [ 439.057031] audit: type=1326 audit(1552828819.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15459 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:19 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fchmod(0xffffffffffffffff, 0x0) 13:20:19 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 439.212991] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 [ 439.229002] audit: type=1326 audit(1552828819.237:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15501 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:19 executing program 1: 13:20:19 executing program 2: [ 439.392636] audit: type=1326 audit(1552828819.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15505 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0xffff0000 13:20:19 executing program 1: 13:20:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 13:20:22 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:22 executing program 2: 13:20:22 executing program 1: 13:20:22 executing program 5: 13:20:22 executing program 3: 13:20:22 executing program 3: 13:20:22 executing program 2: 13:20:22 executing program 1: 13:20:22 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:22 executing program 5: 13:20:22 executing program 2: 13:20:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 13:20:24 executing program 3: 13:20:24 executing program 1: 13:20:24 executing program 5: 13:20:24 executing program 2: 13:20:24 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:24 executing program 5: 13:20:24 executing program 2: 13:20:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000020bfa30000000000000703000000dbffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7040000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], 0x0}, 0x48) 13:20:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xe4\x00\xec\xff\x03E') getdents(r0, &(0x7f0000000040)=""/208, 0xd0) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 13:20:25 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000013c0)={0x0, 0x0, 0x0}) 13:20:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000040)) 13:20:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 13:20:27 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:27 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) 13:20:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:20:27 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x0, 0x5) getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x101000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x14) read$eventfd(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001200), &(0x7f0000001240)=0x4) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0xc) 13:20:27 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000800)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'nr0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001180)}, 0x800) write(r2, &(0x7f0000000300), 0xffffff7e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000940)="2e52c9c5a9755f3c81c0e014ce0f0465ab555b19309bb3f073a72fe95b8c01803ed60c59705fdc6e052be4010dee742feaee12ade08eef1b335cdeb5301cc32eb3a5c0694234aba5f5ffff18ce36cb94ce2feb259c56def03f3b130b1306731c5c1995667755883b167074e666dc28a77b348331bb2cf96a186b4308b8f5216fdee8948aa13094d8af9b6610feec8f78d92df700540dfe2aa103738df7", 0x9d) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000007c0)=0x5) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) quotactl(0xb7, 0x0, 0x0, &(0x7f0000000840)="39898e73bb5d5f9bb478b97628c7be66edd162dc0446ef1762239b1f2281e5db2f16ed53868367b63272e31bf96cc1d83985e895fb91400619754d0d5134de6735832ef057b4489b551bbacd40bb") ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0xb5) getsockopt$inet_buf(r1, 0x0, 0x2e, 0x0, &(0x7f0000000300)) ioctl$PPPIOCSPASS(r1, 0x40087447, 0x0) write$binfmt_elf64(r3, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x1, 0x0, 0x0, 0x2}) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000600)=""/246, 0xf6}], 0x3, 0x0) 13:20:27 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x101000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 13:20:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) init_module(0x0, 0x0, &(0x7f0000000180)='!systemtrustedem0em0em1bdev^,(system\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 13:20:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:20:28 executing program 3: pipe(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cts(cbc(camellia)))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x7fffffff, 0x3ff, 0x7, 0x0, 0x1, 0x71e, 0x4, 0x9, 0x8, 0x2}, 0xb) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) r2 = socket(0x11, 0x802, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 13:20:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 448.429318] device team0 entered promiscuous mode [ 448.434601] device team_slave_0 entered promiscuous mode [ 448.444922] device team_slave_1 entered promiscuous mode [ 448.479075] 8021q: adding VLAN 0 to HW filter on device team0 13:20:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1}) [ 448.661209] device team0 left promiscuous mode [ 448.666059] device team_slave_0 left promiscuous mode [ 448.672566] device team_slave_1 left promiscuous mode 13:20:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000107, 0x5000000) 13:20:29 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = memfd_create(&(0x7f0000000000)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000000) 13:20:29 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='0-\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 13:20:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = memfd_create(&(0x7f0000000000)='Pev ', 0x0) ftruncate(r1, 0x200739) finit_module(r1, 0x0, 0x0) [ 449.395695] device team0 entered promiscuous mode [ 449.400812] device team_slave_0 entered promiscuous mode [ 449.407021] device team_slave_1 entered promiscuous mode [ 449.415899] 8021q: adding VLAN 0 to HW filter on device team0 13:20:29 executing program 2: syz_open_dev$dspn(0x0, 0x0, 0x5) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x101000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) syz_open_pts(r0, 0x0) 13:20:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08"}) 13:20:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:29 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)) 13:20:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0xfdcc) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000002840)=""/188, 0xbc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x40, 0x0) write$9p(r2, &(0x7f0000001540)="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", 0xa85) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x20) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) wait4(r4, &(0x7f00000005c0), 0x80000009, &(0x7f0000000500)) 13:20:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 13:20:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = memfd_create(&(0x7f0000000040)='procmd5sum\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x9, 0x0) tkill(r0, 0x1000000000016) write$P9_RREAD(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1d"], 0x1) 13:20:30 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 13:20:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r1, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) signalfd4(r2, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 13:20:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r2 = memfd_create(&(0x7f0000000000)='Pev ', 0x0) ftruncate(r2, 0x200739) sendfile(r1, r2, 0x0, 0xa00004000000000) 13:20:30 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='0-\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x23, 0x0, 0x0, @tick=0x3c123f31, {}, {}, @connect}], 0x30) 13:20:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 450.412595] protocol 88fb is buggy, dev hsr_slave_0 [ 450.418491] protocol 88fb is buggy, dev hsr_slave_1 13:20:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000485]}) [ 450.572494] protocol 88fb is buggy, dev hsr_slave_0 [ 450.578415] protocol 88fb is buggy, dev hsr_slave_1 [ 450.584526] protocol 88fb is buggy, dev hsr_slave_0 [ 450.590255] protocol 88fb is buggy, dev hsr_slave_1 13:20:30 executing program 2: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 13:20:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 13:20:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:31 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='\x00\xe4\x00\xec\xff\x03E') getdents(r1, &(0x7f0000000040)=""/208, 0xd0) getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 451.212562] protocol 88fb is buggy, dev hsr_slave_0 [ 451.218436] protocol 88fb is buggy, dev hsr_slave_1 13:20:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:20:31 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000000008000800a36cae1a"], 0x24}}, 0x0) 13:20:31 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:20:31 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:31 executing program 2: 13:20:31 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 451.612836] protocol 88fb is buggy, dev hsr_slave_0 [ 451.618735] protocol 88fb is buggy, dev hsr_slave_1 13:20:31 executing program 1: 13:20:31 executing program 2: 13:20:31 executing program 3: 13:20:31 executing program 5: 13:20:32 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:32 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:32 executing program 1: r0 = socket(0x880800000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet6(r2, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000ad6fad)='\x00', 0x1, 0x3, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xe0) 13:20:32 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:32 executing program 2: 13:20:32 executing program 3: 13:20:32 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:32 executing program 5: 13:20:32 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:32 executing program 1: 13:20:32 executing program 3: 13:20:32 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:32 executing program 5: 13:20:32 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46032003a2090000000000000002000300240d0000a20000001e60c1320dda329ad49039000000004000005f900000001d0100000000000001000000008038000100d12b000009000000002002000000090000000000000000000000000000000104000000000000020000000000000008001b000000001ce40000000000000055e574640104000000000000000002000100000000000000ffff000000000000ff0f0000000000000500000000000000000000000000000030cac01d7ff6edea5bc471a12d49c21205d10211ac817ce2e6e51d9577a27faf3a7a3b927a68c0570ea2dff9558b07e7666c2d2c6d811f9427cebae012fccb3eed2b223bda695b6f5e9bd2d124f81c39cb3d"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:32 executing program 2: 13:20:32 executing program 1: 13:20:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:33 executing program 3: 13:20:33 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:33 executing program 5: 13:20:33 executing program 1: 13:20:33 executing program 2: 13:20:33 executing program 1: 13:20:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:33 executing program 5: 13:20:33 executing program 2: 13:20:33 executing program 3: 13:20:33 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:33 executing program 1: 13:20:33 executing program 2: 13:20:33 executing program 5: 13:20:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:33 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:33 executing program 3: 13:20:34 executing program 1: 13:20:34 executing program 2: 13:20:34 executing program 3: 13:20:34 executing program 5: 13:20:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:34 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:34 executing program 1: 13:20:34 executing program 2: 13:20:34 executing program 3: 13:20:34 executing program 1: 13:20:34 executing program 5: 13:20:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:34 executing program 1: 13:20:34 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) syz_open_dev$vcsa(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000007) 13:20:34 executing program 2: r0 = socket(0x11, 0x802, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 13:20:34 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0t\x03\x00\x02\xff', 0x4bfd}) 13:20:34 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 454.955695] device team0 left promiscuous mode [ 454.960877] device team_slave_0 left promiscuous mode [ 454.970371] device team_slave_1 left promiscuous mode 13:20:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x80000001}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x102) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000) r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000180)=""/7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='vmnet1security@systemem1:\x00', r4}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) rmdir(&(0x7f0000001540)='./file0/file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xc9, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000580)={r5, 0x3}, &(0x7f00000005c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xffffffffffff9223, 0x98003) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB]) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) r6 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 13:20:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:35 executing program 2: 13:20:35 executing program 3: [ 455.421836] net_ratelimit: 21 callbacks suppressed [ 455.421857] protocol 88fb is buggy, dev hsr_slave_1 13:20:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:35 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x408c5333, &(0x7f0000000080)) 13:20:35 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) [ 455.772527] protocol 88fb is buggy, dev hsr_slave_0 [ 455.778282] protocol 88fb is buggy, dev hsr_slave_1 13:20:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 456.012738] protocol 88fb is buggy, dev hsr_slave_0 [ 456.018556] protocol 88fb is buggy, dev hsr_slave_1 13:20:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x80000001}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x102) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xc9, 0x7}, &(0x7f0000000540)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xffffffffffff9223, 0x98003) umount2(&(0x7f0000000340)='./file0\x00', 0x0) [ 456.452007] device team0 entered promiscuous mode [ 456.457123] device team_slave_0 entered promiscuous mode [ 456.463130] device team_slave_1 entered promiscuous mode [ 456.472155] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.567661] device team0 left promiscuous mode [ 456.572563] device team_slave_0 left promiscuous mode [ 456.578170] device team_slave_1 left promiscuous mode [ 456.652376] protocol 88fb is buggy, dev hsr_slave_0 [ 456.658048] protocol 88fb is buggy, dev hsr_slave_1 [ 456.822492] protocol 88fb is buggy, dev hsr_slave_0 [ 456.828232] protocol 88fb is buggy, dev hsr_slave_1 [ 456.834332] protocol 88fb is buggy, dev hsr_slave_0 13:20:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x0) open(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 13:20:36 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:36 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x80000001}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xc9, 0x7}, &(0x7f0000000540)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xffffffffffff9223, 0x98003) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c00b62390531970f480c139e31ed7b05ace9330b7c8910a67cc52331b8c66d9ac6697ef4be9597f41c31629ad6762f13a00004f416c011b74dd9555488d5a4eb0b5a70607c9f2c7d86eaaec8585ae518dfdc017f82b74d55c18e07a0f9c4f4463fc5bc8aeff61709a94039632d89e69403b9e107dea0755dcc226333af6fa20543a3e716720a882ca2d002735b86e4923ba0b7a37e6396aecdda4c7771b6a75dd576f1fe40dc6627dce3b814505789a6059a2d2109096360ae3379444d1b137451ee82cc187d458728a76af6232175f2a2f9ebc7dab235fb66f5b89a0"]) ppoll(&(0x7f00000001c0)=[{}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000680)='./file0\x00', 0x10000, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 13:20:37 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff01c}, {0x6}]}, 0x10) [ 456.994000] device team0 entered promiscuous mode [ 456.998940] device team_slave_0 entered promiscuous mode [ 457.005084] device team_slave_1 entered promiscuous mode [ 457.013996] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.038081] device team0 left promiscuous mode [ 457.043191] device team_slave_0 left promiscuous mode [ 457.048785] device team_slave_1 left promiscuous mode 13:20:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:37 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") socket$packet(0x11, 0x4000000000000003, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@empty, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:20:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0xb}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3ce93489ca47e9a5"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x5}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "940e2da48fefad9d"}}, 0x48}}, 0x0) 13:20:37 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:37 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0) 13:20:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 457.869911] device team0 entered promiscuous mode [ 457.875110] device team_slave_0 entered promiscuous mode [ 457.880986] device team_slave_1 entered promiscuous mode [ 457.889957] 8021q: adding VLAN 0 to HW filter on device team0 13:20:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)={r1, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2}, 0x0) 13:20:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 13:20:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:38 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:38 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:38 executing program 3: socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x7fd, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0x20, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d17", 0x0, 0x100}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xc9, 0x0, &(0x7f0000000540)="dfb1e4bd45c49ec2c0f7f06163e0a934d508b44fc44e86cf2d19a1480d6a17f084dd811053592e79b9ce747f257f308c83f29cdfcb53efad8e8d368c6abe8db0675f8e51a22be3449fb72219c32285ee8401fd9ac422ab651f0194c4f9ebd787844bb3270e027620162168ac35cc01e2e6f7b2870d2fce9434ed5a32b66992c01e83edb7a9933d082c8a1cc85d4c869cb4f0754a73b9ba2cdcced964f3774a5fdf79abaa784a0bf73e7ee75d3b6ff9623c93a9c0829669c10de56cc25b62389086c43f50410cf2b2bb", 0x0, 0xfe}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) 13:20:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 458.383457] device team0 left promiscuous mode [ 458.388286] device team_slave_0 left promiscuous mode [ 458.394081] device team_slave_1 left promiscuous mode 13:20:38 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:38 executing program 3: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x800000000002, 0x0) r1 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2008, 0x4, 0x1f, 0x5, 0x0, 0xd5, 0x3, 0x8, 0x1, 0x3, 0x4, 0x2b6, 0x8, 0x200, 0x80000001, 0xd0, 0xc00000000, 0x100000001, 0x9, 0x1000, 0x9, 0x1000, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffa, 0x9, 0xa4, 0x6, 0x400, 0x100000001, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x800, 0x100000000, 0xb}, r1, 0x10, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="86263c464b550a885bb9a7ba226a2e9eafe3a94c131f52bf5e724d8abd3cdcc86dbb06ca8dd9428f5a38228b6980fce21b8e6345f7b322fbd95f6c15dc36610fa6d0ef896860e9caed8fa69c79b7589d0142ce2d1166bc0fa79036995e73a69cb1bff100c55a83000000000000fed08bbff8edb6bdc1d465fe93a6eeac2a4f395807043059045b26fa961cf41ee2840a65f963a7a7f5da88beefbfb7ec0000000000007cf3084046f887421b3e95f86eab1839c671efb5ce3547ff130d6d78e8aa7be6136244010000002281fc07a006a3a7fd0b41218240dc2fd290586a261f56ba6358e6c6d5c24729f3c2261e581a10f8f44fd01a969d0f682c86866481fefd1fe9142c0063865aab5f0da5d27cd51a7e26bdf9da76c2f3a70f0dc3c90e283d023aff6814371daf050b14d8461685be5e87fb5f54e381af3dc5381a6db89676445a4b4dab55440a40e9b3d90e8a7e39ad16720265a4f1"], 0x158) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.net/syz1\x00\x11\t\x1e\x06\xff\f\xe2C\tC\x9e9\x94=\xe7Kw\xc9c\xf4\xf6\x97\xf8Y\xb1q\x1d\x1e\xda\x91\x1a6\x18y\xaaQ\vf\xde`\x03\xa1\xbc\xd5\xe5_\f\xbc>\xdd8\x97>\x83\x9b\xc5V\n\x18\x7f\xed\x9eS\xdd\xed\xfeh\x8c\x00\x00\x00\x00\x9f\xe0q\xc3\xb2\x86n\x0f_\xd2\xe9\a*\x85\f\xab\x9eAv[\xe3\x81\xc6\xb1\x97Z7\x8d\x8dxL\xc3\x7f\xf5y\xe6\xaf#\xd6\x99\x01\xe0\x1b\xd7\xdcN7*\xfe\xbb\xbfM\x8e\x82x\xcf\x97\x12\xf9\n\xb6I\xf1\x9c\x18\x06\xc8\xc1f\x1d\xa1\xcb\x14\x03\xe5\x116Sfn\xc1\xfe \xe2\x1d\x8b\xc0\x98R&\xaaD\"5\xae\xe7\x9c\xb8M\a\x8f\xebO\r\xbe\xbdA\xe2\xf5\xd9[*\x9b\x01_\xc3P7\x19X#P\xf3\xf6\x81\a\x81h\xea}\b\xa1\xba\x9c\x8a\x90j]\x05\xf1\xa7\x01\xcd\x99\x19\x1f7\x95LUu=?\xe8(\x95P\xe4\xccy\x98],\x87\xf6\xd6\x1fa\xd1\xb2\xda\x7f\x12\x89\xd1X\xf7\xab:\x85;\xfe\xf1_2N\xbeD5<9\x9b\xa4h\xf5\xe1\xbbxm\xa1 \xe5\xa0\xe7\xd0e\xa9\x96\f\xcb\xc3v\x94\xc5A\xe2\x88W\x87\xe14\xf8\xed\xbf\x18b\xca25\xe9\x0f\xcf\bq\x8b\xba\x92r%P\x82A\x180G]\xd3\xaf\x0fNF\xb7,G4\x06\xab\xeewK{\xc3C\x8b\xb4\xbe\xcc\x86\xe9Z\xcanR\xd4Tw\x83M\xb7\x03\xc2W\xee\xc3Cm\xd7\xbetI[u\xc4zh\xde\x00\xeefv\x9eb\xf7\xd0v6\x10\'\x19\xc4p\xee\xfa\"\xac\x83\xcaVy\xe2\x95\xa3:\x13U}\x05pA\xa5\xfe\xf2\x888\fW\xcf\aG\x8e\x8f\xb2\xb0\x8a\x02\x8e:\\w\x1e\xa9$\x9bY\v\xe1C\xde\"\xb36j\x9729\x06\xfd\x1e\x023\x9d\xc39H\xebvC\xd2\x1b\xf1\xdf\x05\x88\xfb\xb1Y\x9c\b\'\x02P\xe7\xbd\xb8,\xb1\x9a2\x1e\xb8+T\xc7\xc8\xd9\x9e\xa2\x93\xf0\x82\xb6\xfb\x82^\xef\x97\x1e\x17\x83b.\xb5:\v\x9c\xb2\x9a\xab\xdf\x9e\x1ekQEhr\x02^a\xc1\a\xe07\x04\x00\xa1\xa8d:z\xa4o\x03\'\xc8\x86lY$\xc9\xccv=2O\xed\x88\xfb\xe7q\xec\xe4\xe9,\xff\x1da\xf5\xde\xda$\r\xc6E\xf5\xec\x1a\xb3\xe7F\f\x92\xd5\xed\xddB5Y\xa1H\x18=)\xa1\xdd\xf2\xae\x88\xda\xf4\x14\x93\xab\xd0\x0e\xe2n\xe2s\x1c\xf5\xfc\xd2\xdd\xa6\x18\x04\x90\xe3\xe8\xfd&`\xdda\xad\xbb\xa4~,\xd3\x01\xc7\b\x9c\x14\x7fb\xdacb\xcdF\xf3?\xe1mFpV\xa8\xd4\xd9\xa03\x7fN\xcd\v\xb3\xadOc$', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) 13:20:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000840)='G\xfd\xff\x00\xbf\xda`x\x15+e\x88.\x14\x90\x7f\xfb\xc5\xb3\t\b\xd2*e\xbe%5\xb4r+\x05\xc8Q\x1e\"bJ\x9c\x89VJ\xf6\xedW\xa5\tU\xcb\xd27\x14\xbf\xf0\xfe\xdf[\xd9\r%\xfd\xbb\x9eD\x96\xbc\a\xa3\v4E\\G\x15\xde\xbd\xf9\xe2\x92\xa0\xa3\xb1|\xb4\xf4\xaf\xfexF\xd4\x10\x04\x04\xde\xc9\x7f\xecvK\xccI&\xbf\x87\xf4\xe8\x89\xf1-\x8f\xf0]>DS\x8a\xa6\'\xca\xc1C\xca\xa2\x05\xbcl\ti\x81-Q\x99o1@\xf7\xce\x18\xe8\xc7m\xd7|\x8a\xcc\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251}, 0x48) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x8000a0, 0x0, 0x85, 0x0, &(0x7f0000000340)=""/133, 0x429}, 0x28) socketpair(0x0, 0x7fd, 0x0, &(0x7f0000001a80)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000000, 0x20, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d17", 0x0, 0x100}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) 13:20:39 executing program 2: socket$kcm(0x10, 0x800000000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xa8\xb71\a\x1b;zHUX\x06\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 13:20:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0x20, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d17", 0x0, 0x100}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) 13:20:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000ffffff5915168bff4d004643"], 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 459.456440] device team0 entered promiscuous mode [ 459.461655] device team_slave_0 entered promiscuous mode [ 459.467569] device team_slave_1 entered promiscuous mode [ 459.476625] 8021q: adding VLAN 0 to HW filter on device team0 13:20:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:20:39 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@nl=@unspec, 0x80, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x0, 0x0}, 0x30) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 13:20:39 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, r0) 13:20:39 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 459.896666] device team0 left promiscuous mode [ 459.901501] device team_slave_0 left promiscuous mode [ 459.907371] device team_slave_1 left promiscuous mode 13:20:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:20:40 executing program 3: syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 13:20:40 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0x0) 13:20:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 460.293539] binder_alloc: binder_alloc_mmap_handler: 16162 20001000-20003000 already mapped failed -16 13:20:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00\xe4US\x82\xf3\xe0\xd0t}`P\xc3y\xdb\x80+\xcc\x13!j\xca\xcf`\x8c\x00\a\xa2\xddK\x0e\x9a\xfd=\xc4\x94\xb7\xba=\xbd\x94~\f%g\xcac\xa0 \xba\xff\x05\x8c\xd0<\x029\x00\x99\xb2Y\xf3e%\xc0\xe0\xf0j\x9f\xba\xba\xff\x99\x89\xa1\xe5\xb9x\xfc\x80\x7f\xe6X5P(\xd3\x18X\x01,\xe3\xa0\x8c\x91\xaaXv\xb4\x7f_\x9e&\x9b8,\nB\x0e\x16\xb5\xaa9\xca\x1aswN\xa6\x02\x05\x9a\xa3\xca\x97') exit(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 13:20:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) [ 460.812784] net_ratelimit: 19 callbacks suppressed [ 460.812816] protocol 88fb is buggy, dev hsr_slave_0 [ 460.823815] protocol 88fb is buggy, dev hsr_slave_1 [ 460.894279] device team0 entered promiscuous mode [ 460.899269] device team_slave_0 entered promiscuous mode [ 460.905349] device team_slave_1 entered promiscuous mode [ 460.914290] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.972615] protocol 88fb is buggy, dev hsr_slave_0 [ 460.978418] protocol 88fb is buggy, dev hsr_slave_1 [ 460.984526] protocol 88fb is buggy, dev hsr_slave_0 [ 460.990282] protocol 88fb is buggy, dev hsr_slave_1 13:20:41 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:20:41 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) [ 461.211161] device team0 left promiscuous mode [ 461.216225] device team_slave_0 left promiscuous mode [ 461.221994] device team_slave_1 left promiscuous mode 13:20:41 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:41 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) [ 461.538914] kauditd_printk_skb: 2 callbacks suppressed [ 461.538950] audit: type=1804 audit(1552828841.587:61): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/261/file0/bus" dev="ramfs" ino=54040 res=1 [ 461.612423] protocol 88fb is buggy, dev hsr_slave_0 [ 461.618141] protocol 88fb is buggy, dev hsr_slave_1 [ 462.012929] protocol 88fb is buggy, dev hsr_slave_0 [ 462.018743] protocol 88fb is buggy, dev hsr_slave_1 13:20:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 462.355660] device team0 entered promiscuous mode [ 462.360688] device team_slave_0 entered promiscuous mode [ 462.366791] device team_slave_1 entered promiscuous mode [ 462.375712] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.386450] audit: type=1804 audit(1552828842.437:62): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/261/file0/file0/bus" dev="ramfs" ino=54063 res=1 13:20:42 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:42 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 462.717924] device team0 left promiscuous mode [ 462.722998] device team_slave_0 left promiscuous mode [ 462.728612] device team_slave_1 left promiscuous mode 13:20:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 463.482329] device team0 entered promiscuous mode [ 463.487501] device team_slave_0 entered promiscuous mode [ 463.493555] device team_slave_1 entered promiscuous mode [ 463.502582] 8021q: adding VLAN 0 to HW filter on device team0 13:20:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 463.642442] audit: type=1800 audit(1552828843.697:64): pid=16205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=53027 res=0 [ 463.663987] audit: type=1800 audit(1552828843.697:63): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=53991 res=0 13:20:43 executing program 3: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x8c02) 13:20:43 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) socketpair$unix(0x1, 0x40000000000801, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 463.846017] device team0 left promiscuous mode [ 463.850889] device team_slave_0 left promiscuous mode [ 463.856746] device team_slave_1 left promiscuous mode 13:20:43 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 464.519621] audit: type=1800 audit(1552828844.567:65): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="ramfs" ino=54063 res=0 [ 464.586995] audit: type=1800 audit(1552828844.597:66): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="ramfs" ino=54040 res=0 [ 464.679878] device team0 entered promiscuous mode [ 464.685039] device team_slave_0 entered promiscuous mode [ 464.690915] device team_slave_1 entered promiscuous mode [ 464.699881] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.172532] net_ratelimit: 22 callbacks suppressed [ 466.172554] protocol 88fb is buggy, dev hsr_slave_0 [ 466.183386] protocol 88fb is buggy, dev hsr_slave_1 [ 466.412314] protocol 88fb is buggy, dev hsr_slave_0 [ 466.418013] protocol 88fb is buggy, dev hsr_slave_1 13:20:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0cc5605, &(0x7f0000000000)={0x3, 0x0, 0x0, [], 0x0}) 13:20:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000040)={0x1}) 13:20:46 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000280)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xb, 0xc, 0x7, 0x9, 0x40, 0x46, 0x5}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x102000002) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 13:20:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x2040000000003, 0x800000001, 0x2) r1 = open(0x0, 0x0, 0x0) r2 = creat(0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000140)="7a36468597d487b98d839cda0df22ffc881d21") r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1000, 0x0, 0xffffffff6fffffff}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x21) ptrace(0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10d) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x0, 0x1, 0x5cc6, 0x6}, {0x40, 0x1, 0x1f, 0xf93f}, {0x6, 0x1000, 0x82, 0x7fff}, {0x1, 0xfffffffffffffffc, 0xffff, 0x3}, {0x8, 0x80, 0x100000001, 0x1}, {0x1f, 0x1f, 0x176, 0xb6}, {0x400, 0x200, 0xff, 0x9}]}) r6 = request_key(&(0x7f0000000480)='\x00\x00\x00\xde\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)='syz_tun\x00', 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='syz_tun\x00', 0xfffffffffffffff9) keyctl$search(0xa, r6, &(0x7f0000000280)='big_ke\x97z', &(0x7f00000002c0)={'syz', 0x0}, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000700)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x4080808) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 13:20:46 executing program 1: pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 13:20:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 466.558728] device team0 left promiscuous mode [ 466.563675] device team_slave_0 left promiscuous mode [ 466.569274] device team_slave_1 left promiscuous mode 13:20:46 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000300)={0x0, @src_change}) syz_open_dev$dmmidi(0x0, 0x100, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @mcast1, 0xeb1}, 0x1c) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1f) 13:20:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:20:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/11, 0xb) [ 466.915778] ================================================================== [ 466.923229] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 466.929800] CPU: 1 PID: 16286 Comm: syz-executor.3 Not tainted 5.0.0+ #15 [ 466.936767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.946156] Call Trace: [ 466.948810] dump_stack+0x173/0x1d0 [ 466.952494] kmsan_report+0x12e/0x2a0 [ 466.956364] kmsan_internal_check_memory+0x34e/0xb80 [ 466.961539] kmsan_copy_to_user+0xab/0xc0 [ 466.965738] _copy_to_user+0x16b/0x1f0 [ 466.969779] video_usercopy+0x170e/0x1830 [ 466.974016] ? __perf_event_task_sched_in+0xa33/0xaa0 [ 466.979272] video_ioctl2+0x9f/0xb0 [ 466.982959] ? video_usercopy+0x1830/0x1830 [ 466.987334] v4l2_ioctl+0x23f/0x270 [ 466.991016] ? v4l2_poll+0x400/0x400 [ 466.994787] do_vfs_ioctl+0xebd/0x2bf0 [ 466.998767] ? security_file_ioctl+0x92/0x200 [ 467.003328] __se_sys_ioctl+0x1da/0x270 [ 467.007372] __x64_sys_ioctl+0x4a/0x70 [ 467.011308] do_syscall_64+0xbc/0xf0 [ 467.015072] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 467.020335] RIP: 0033:0x458079 [ 467.023569] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.042508] RSP: 002b:00007f15890d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.050251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 467.052628] protocol 88fb is buggy, dev hsr_slave_0 [ 467.057551] RDX: 0000000020000300 RSI: 0000000080885659 RDI: 0000000000000005 [ 467.057581] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 467.063416] protocol 88fb is buggy, dev hsr_slave_1 [ 467.069903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15890d36d4 [ 467.069934] R13: 00000000004c2a49 R14: 00000000004d54d0 R15: 00000000ffffffff [ 467.096830] [ 467.098478] Uninit was stored to memory at: [ 467.102834] kmsan_internal_chain_origin+0x134/0x230 [ 467.107972] kmsan_memcpy_memmove_metadata+0xc0b/0xfb0 [ 467.113294] kmsan_memcpy_metadata+0xb/0x10 [ 467.117664] __msan_memcpy+0x58/0x70 [ 467.121415] __v4l2_event_dequeue+0x2d2/0x6f0 [ 467.125949] v4l2_event_dequeue+0x41c/0x560 [ 467.130317] v4l_dqevent+0xba/0xe0 [ 467.133888] __video_do_ioctl+0x1444/0x1b50 [ 467.138250] video_usercopy+0xe60/0x1830 [ 467.142349] video_ioctl2+0x9f/0xb0 [ 467.146007] v4l2_ioctl+0x23f/0x270 [ 467.149672] do_vfs_ioctl+0xebd/0x2bf0 [ 467.153594] __se_sys_ioctl+0x1da/0x270 [ 467.157607] __x64_sys_ioctl+0x4a/0x70 [ 467.161528] do_syscall_64+0xbc/0xf0 [ 467.165282] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 467.170491] [ 467.172132] Uninit was stored to memory at: [ 467.176483] kmsan_internal_chain_origin+0x134/0x230 [ 467.181620] kmsan_memcpy_memmove_metadata+0xc0b/0xfb0 [ 467.186964] kmsan_memcpy_metadata+0xb/0x10 [ 467.191324] __msan_memcpy+0x58/0x70 [ 467.195079] __v4l2_event_queue_fh+0xcd7/0x1230 [ 467.199797] v4l2_event_queue_fh+0x1a1/0x270 [ 467.204314] v4l2_ctrl_add_event+0x952/0xc20 [ 467.208775] v4l2_event_subscribe+0xf64/0x1230 [ 467.213395] v4l2_ctrl_subscribe_event+0xb6/0x110 [ 467.218280] v4l_subscribe_event+0x9e/0xc0 [ 467.222554] __video_do_ioctl+0x1444/0x1b50 [ 467.226919] video_usercopy+0xe60/0x1830 [ 467.231011] video_ioctl2+0x9f/0xb0 [ 467.234672] v4l2_ioctl+0x23f/0x270 [ 467.238350] do_vfs_ioctl+0xebd/0x2bf0 [ 467.242280] __se_sys_ioctl+0x1da/0x270 [ 467.246308] __x64_sys_ioctl+0x4a/0x70 [ 467.250232] do_syscall_64+0xbc/0xf0 [ 467.253991] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 467.259193] [ 467.260837] Local variable description: ----ev@v4l2_ctrl_add_event [ 467.267174] Variable was created at: [ 467.270925] v4l2_ctrl_add_event+0x6e/0xc20 [ 467.275288] v4l2_event_subscribe+0xf64/0x1230 [ 467.279894] [ 467.281548] Bytes 44-71 of 136 are uninitialized [ 467.286328] Memory access of size 136 starts at ffff8880986626c0 [ 467.292494] Data copied to user address 0000000020000300 [ 467.297963] ================================================================== [ 467.305340] Disabling lock debugging due to kernel taint [ 467.310817] Kernel panic - not syncing: panic_on_warn set ... [ 467.316744] CPU: 1 PID: 16286 Comm: syz-executor.3 Tainted: G B 5.0.0+ #15 [ 467.325092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.334473] Call Trace: [ 467.337116] dump_stack+0x173/0x1d0 [ 467.340805] panic+0x3d1/0xb01 [ 467.344086] kmsan_report+0x293/0x2a0 [ 467.347945] kmsan_internal_check_memory+0x34e/0xb80 [ 467.353121] kmsan_copy_to_user+0xab/0xc0 [ 467.357323] _copy_to_user+0x16b/0x1f0 [ 467.361274] video_usercopy+0x170e/0x1830 [ 467.365525] ? __perf_event_task_sched_in+0xa33/0xaa0 [ 467.370792] video_ioctl2+0x9f/0xb0 [ 467.374506] ? video_usercopy+0x1830/0x1830 [ 467.378987] v4l2_ioctl+0x23f/0x270 [ 467.382664] ? v4l2_poll+0x400/0x400 [ 467.386428] do_vfs_ioctl+0xebd/0x2bf0 [ 467.390386] ? security_file_ioctl+0x92/0x200 [ 467.395056] __se_sys_ioctl+0x1da/0x270 [ 467.399095] __x64_sys_ioctl+0x4a/0x70 [ 467.403037] do_syscall_64+0xbc/0xf0 [ 467.406805] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 467.412028] RIP: 0033:0x458079 [ 467.412496] device team0 entered promiscuous mode [ 467.415241] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.415254] RSP: 002b:00007f15890d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.415273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 467.415285] RDX: 0000000020000300 RSI: 0000000080885659 RDI: 0000000000000005 [ 467.415297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 467.415317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15890d36d4 [ 467.415329] R13: 00000000004c2a49 R14: 00000000004d54d0 R15: 00000000ffffffff [ 467.421025] Kernel Offset: disabled [ 467.488212] Rebooting in 86400 seconds..